Skip to content
OpenAdvisories

Package · PyPI

openc3

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42084

    OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality allows a user to change their password without providing t…

    OpenC3 cosmos openc3 openc3 PyPI RubyGems
  • High 7.5
    CVE-2025-28382

    OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

    An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

    openc3 openc3-cosmos-tool-iframe PyPI RubyGems
  • High 7.5
    CVE-2025-28381

    A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variable…

    openc3 PyPI