PT-2025-25412 · Openc3 · Openc3 Cosmos

Published 2025-06-13 · Updated 2025-10-27 · CVE-2025-28381

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS version 6.0.0

Description A credential leak in OpenC3 COSMOS allows attackers to access service credentials as environment variables stored in all containers. This issue is related to the cleartext storage of sensitive information in an environment variable.

Recommendations For OpenC3 COSMOS version 6.0.0, consider removing or securing the environment variables that store service credentials to prevent unauthorized access. As a temporary workaround, restrict access to the containers to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-526

Related Identifiers

CVE-2025-28381

Affected Products

Openc3 Cosmos

References · 13

• 🔥 https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · Exploit
• https://osv.dev/vulnerability/CVE-2025-28381 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-28381 · Security Note
• https://github.com/OpenC3/cosmos/pull/1816 · Note
• https://github.com/OpenC3/cosmos/releases/tag/v6.0.2 · Note
• https://github.com/OpenC3/cosmos/pull/1816/commits/cce64c213fd2e6a70e2ccbf3622949fe8f9dcaef · Note
• https://t.me/latest_high_impact_cve/2651 · Telegram Post
• https://t.me/cveNotify/140491 · Telegram Post
• https://twitter.com/CVEnew/status/1933520878555254975 · Twitter Post
• https://twitter.com/SpaceCyberSec/status/1933796761874899367 · Twitter Post
• https://t.me/cvetracker/26187 · Telegram Post
• https://twitter.com/cracbot/status/1935291468098453896 · Twitter Post
• https://openc3.com · Note