CVE-2026-111696
data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via cross-workspace IDOR, and decrypt them offline to recover plaintext database credentials.
| CWE | CWE-321 |
| Vendor | shaiwz |
| Product | data-platform-open |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for shaiwz data-platform-open
Be the first to know when new medium vulnerabilities affecting shaiwz data-platform-open are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
shaiwz / data-platform-open
0 ≤ efeacd35e8450b7a084fa2134d292cd058cf605b
References
hackmd.io: https://hackmd.io/@hieuPenguinnn/data-platform-open-datasource-cross-workspace-idor-and-hardcoded-aes-key github.com: https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-web/src/main/java/cn/dataplatform/open/web/service/impl/AesPasswordEncAndDecServiceImpl.java#L21-L25 github.com: https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-common/src/main/resources/application-common.yml#L104-L106 vulncheck.com: https://www.vulncheck.com/advisories/data-platform-open-through-commit-efeacd3-hardcoded-aes-key-for-datasource-passwords
Credits
hieuPenguinnn