What is the CVSS score of CVE-2025-28381?

CVE-2025-28381 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Cosmos are affected by CVE-2025-28381?

OpenC3 COSMOS installations before v6.0.2 expose service credentials stored in container environment variables to attackers.

Is there a public PoC exploit available for CVE-2025-28381?

Yes, a public proof-of-concept exploit is available for CVE-2025-28381. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-28381?

Within 24 hours: Inventory all OpenC3 COSMOS deployments and identify current versions; isolate affected instances from production networks if upgrade timeline exceeds 48 hours. Within 7 days: Contact vendor for v6.0.2 availability and timeline; if unavailable, implement network segmentation to restrict container-to-service communication and rotate all service credentials used by COSMOS. Within 30 days: Complete upgrade to v6.0.2 or later; conduct forensic audit for unauthorized credential access; implement secrets management solution (HashiCorp Vault, AWS Secrets Manager) to prevent future environment variable exposure.

Cosmos CVE-2025-28381

EUVD-2025-18283 HIGH

Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526)

2025-06-13 cve@mitre.org

Information Disclosure Cosmos

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2025-18283

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

PoC Detected

Oct 27, 2025 - 16:15 vuln.today

Public exploit code

CVE Published

Jun 13, 2025 - 14:15 nvd

HIGH 7.5

DescriptionCVE.org

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

AnalysisAI

A security vulnerability in OpenC3 COSMOS (CVSS 7.5) that allows attackers. Risk factors: public PoC available.

Technical ContextAI

Vulnerability type not specified by vendor. CVSS 7.5 indicates high severity. Affects OpenC3 COSMOS.

RemediationAI

Monitor vendor channels for patch availability.

More in Cosmos

View all

CVE-2025-28386 CRITICAL Act Now POC

9.8 Jun 13

Critical remote code execution vulnerability in OpenC3 COSMOS v6.0.0's Plugin Management component that allows unauthent

CVE-2025-28388 CRITICAL Act Now POC

9.8 Jun 13

OpenC3 COSMOS versions before v6.0.2 contain hardcoded credentials embedded in the Service Account, allowing unauthentic

CVE-2025-28389 CRITICAL Act Now POC

9.8 Jun 13

Critical authentication bypass vulnerability in OpenC3 COSMOS v6.0.0 caused by weak password requirements that enable br

CVE-2025-28384 CRITICAL Act Now POC

9.1 Jun 13

Critical directory traversal vulnerability in OpenC3 COSMOS versions before 6.1.0 affecting the /script-api/scripts/ end

CVE-2025-28382 HIGH This Week POC

7.5 Jun 13

Directory traversal vulnerability in OpenC3 COSMOS versions before 6.1.0 that allows unauthenticated remote attackers to

CVE-2025-28380 MEDIUM This Month POC

6.1 Jun 13

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scri

CVE-2026-42087 CRITICAL Act Now

9.6 May 04

SQL injection in OpenC3 COSMOS 6.7.0 to 7.0.0-rc2 allows authenticated users with minimal 'tlm' (telemetry viewer) privi

CVE-2024-47529 MEDIUM This Month POC

4.8 Oct 02

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVE-2026-42084 HIGH This Week

8.1 May 04

OpenC3 COSMOS password change functionality accepts valid session tokens in lieu of current passwords, enabling attacker

CVE-2024-46977 MEDIUM This Month

5.3 Oct 02

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVE-2024-43795 MEDIUM This Month

5.1 Oct 02

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVE-2026-42086 MEDIUM This Month

4.6 May 04

Self-XSS in OpenC3 COSMOS Command Sender UI prior to version 7.0.0 allows authenticated users to execute arbitrary JavaS

Same weakness CWE-526 – Cleartext Storage of Sensitive Information in an Environment Variable

View all

CVE-2026-45370 HIGH POC

7.7

CVE-2023-35931 MEDIUM POC

4.3

CVE-2023-5720 HIGH

7.5

CVE-2026-40153 HIGH

7.4

CVE-2024-2700 HIGH

7.0

CVE-2026-76227 MEDIUM

6.8

CVE-2023-43029 MEDIUM

6.8

CVE-2024-4369 MEDIUM

6.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2025-28381 vulnerability details – vuln.today

Back

Cosmos CVE-2025-28381

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Cosmos

Same weakness CWE-526 – Cleartext Storage of Sensitive Information in an Environment Variable

Same technique Information Disclosure

Share

External POC / Exploit Code