Description
Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | openc3 | <= 6.0.0 | — | PYSEC-2025-150 |
Critical · 9.8
CVE-2025-28389
EUVD-2025-18268GHSA-g4xp-7879-36gfPYSEC-2025-150
Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.
Published Jun 13, 2025 · Updated Jun 13, 2025 · Assigned by mitre