CVE-2025-28381

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers...

CVE-2025-28381

The open-source mission framework OpenC3 COSMOS (versions prior to v6.0.2 , specifically identified in v6.0.0 ) is vulnerable to a credential leak due to the cleartext storage of sensitive information in environment variables. This flaw allows an attacker to access service credentials, which are ...