Description
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FunnyWolf | Viper | 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.1.8, 3.1.9, 3.1.10, 3.1.11 | — |
References
- VDB-416236 | FunnyWolf Viper config hard-coded credentials vdb-entry
- VDB-416236 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108584 | CVE Analysis and Report third-party-advisory
- Submit #956815 | FunnyWolf Viper <=3.1.11 Hard-coded Credentials third-party-advisory
- https://github.com/Randark-JMT/vulnerability-reports/blob/main/advisories/2026-09-02-viper-docker-git-credential-leak.md exploit