Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111998— Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Quick assessment

Affected
vanus-labs vanus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Vanus 0.8.0 至 0.9.0 版本存在默认凭据漏洞，允许未认证的远程攻击者利用硬编码的管理员令牌获取 cluster-admin 权限。攻击者可将固定的 Bearer 令牌发送至网关的 gRPC 代理端口，从而管理命名空间、事件总线、用户、令牌及角色绑定，并读取或发布事件。

CVSS 9.8 · Critical

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
vanus-labs vanus 0.8.0≤ 0.9.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111998

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway
Source: CVE Program / CVE List V5
Vulnerability Description
Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users, tokens, and role bindings, and read or publish events.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1392
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
vanus-labs vanus 0.8.0 ~ 0.9.0 -

II. Public POCs for CVE-2026-111998

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111998

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-111998 (1)

Vendor Advisories for CVE-2026-111998 (1)

Other References for CVE-2026-111998 (2)

Same Patch Batch · vanus-labs · 2026-10-18 · 3 CVEs total

CVE-2026-112000 7.6 HIGH Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs
CVE-2026-111999 7.5 HIGH Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

IV. Related Vulnerabilities

Same product: vanus
Same vendor: vanus-labs
Same weakness: CWE-1392

V. Comments for CVE-2026-111998

No comments yet

Leave a comment