What is the CVSS score of CVE-2023-50974?

CVE-2023-50974 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Command Line Interface are affected by CVE-2023-50974?

Organizations using Appwrite CLI should be aware of moderate risk from CVE-2023-50974, a hard-coded credentials vulnerability rated CVSS 5.5.. A patch is available.

Is there a public PoC exploit available for CVE-2023-50974?

Yes, a public proof-of-concept exploit is available for CVE-2023-50974. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2023-50974?

Within 30 days: Identify affected systems running Appwrite CLI and apply vendor patches as part of regular patch cycle. Audit authentication configurations.

Command Line Interface CVE-2023-50974

MEDIUM

Use of Hard-coded Credentials (CWE-798)

2024-01-09 cve@mitre.org

Authentication Bypass Command Line Interface

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

PoC Detected

Jun 17, 2025 - 16:15 vuln.today

Public exploit code

CVE Published

Jan 09, 2024 - 09:15 nvd

MEDIUM 5.5

DescriptionCVE.org

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

AnalysisAI

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials. Affected products include: Appwrite Command Line Interface. Version information: before 3.0.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.