PT-2025-25412 · Openc3 · Openc3 Cosmos

CVE-2025-28381 · Published 2025-06-13 · Updated 2025-10-27

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS version 6.0.0

Description A credential leak in OpenC3 COSMOS allows attackers to access service credentials as environment variables stored in all containers. This issue is related to the cleartext storage of sensitive information in an environment variable.

Recommendations For OpenC3 COSMOS version 6.0.0, consider removing or securing the environment variables that store service credentials to prevent unauthorized access. As a temporary workaround, restrict access to the containers to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-526

Related Identifiers

CVE-2025-28381

PYSEC-2025-255

Affected Products

Openc3 Cosmos

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/28xxx/CVE-2025-28381.json · Exploit
• 🔥 https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-28381 · Security Note
• https://osv.dev/vulnerability/CVE-2025-28381 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-255 · Vendor Advisory
• https://github.com/OpenC3/cosmos/pull/1816 · Note
• https://github.com/OpenC3/cosmos/releases/tag/v6.0.2 · Note
• https://github.com/OpenC3/cosmos/pull/1816/commits/cce64c213fd2e6a70e2ccbf3622949fe8f9dcaef · Note
• https://t.me/cvetracker/26187 · Telegram Post
• https://t.me/cveNotify/140491 · Telegram Post
• https://t.me/latest_high_impact_cve/2651 · Telegram Post
• https://twitter.com/SpaceCyberSec/status/1933796761874899367 · Twitter Post
• https://openc3.com · Note
• https://twitter.com/cracbot/status/1935291468098453896 · Twitter Post
• https://twitter.com/CVEnew/status/1933520878555254975 · Twitter Post