PT-2025-9029 · Unknown · Vue Vben Admin

Hackerhan · Published 2025-02-27 · Updated 2026-01-13 · CVE-2025-25570

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vue Vben Admin version 2.10.1

Description Vue Vben Admin version 2.10.1 allows unauthorized login to the backend due to hardcoded credentials. The issue stems from a broken authentication mechanism caused by the presence of pre-defined credentials within the system.

Recommendations For Vue Vben Admin version 2.10.1, change the hardcoded credentials to prevent unauthorized access to the backend.

Exploit

Fix

Insufficiently Protected Credentials

Using Hardcoded Credentials

Weakness Enumeration

CWE-522

CWE-798

Related Identifiers

CVE-2025-25570

Affected Products

Vue Vben Admin

References · 8

• 🔥 https://github.com/Hackerhan/Vben-Admin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25570 · Security Note
• https://twitter.com/cybercronai/status/1895776545051918617 · Twitter Post
• https://twitter.com/CVEnew/status/1895622681887662494 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2011060695627153434 · Twitter Post
• https://t.me/cvenotify/112719 · Telegram Post
• https://t.me/cvedetector/19102 · Telegram Post
• https://t.me/cvenotify/112854 · Telegram Post