Read the docs
TI-2023-12284 Aliases CVE-2023-27573GHSA-vf6r-c2jr-9wjq

Hard-coded credentials in netbox-community netbox-docker

Priority HIGH 76CWE-1392Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_API_TOKEN). In practice on the public Internet, almost all users changed the password but only about 90% changed the token. Having a default token value was intentional and was valuable for the main intended use case of the netbox-docker product (isolated development networks). Some users engaged in an effort to repurpose netbox-docker for production. The documentation for this effort stated that the defaults must not be used. However, installation did not ensure non-default values. The Supplier was aware of the CVE ID assignment and did not object to the assignment.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00566 47th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed netbox-docker (netbox-community): 2.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
netbox-communitynetbox-dockerbefore 2.5.02.5.0Patch availableCNA
  • netbox-docker Vendornetbox-community Affected before 2.5.0 Fixed in 2.5.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:netboxlabs:netbox-docker:*:*:*:*:*:*:*:*before 2.5.0VulnerableNetBox Labs
  • cpe:2.3:a:netboxlabs:netbox-docker:*:*:*:*:*:*:*:* Versions before 2.5.0 Vulnerable ·NetBox Labs

Remediation

  • Fix · CNA netbox-docker (netbox-community) Fixed in 2.5.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-27573
  2. 2026-10-03 Alias added: GHSA-vf6r-c2jr-9wjq

References

Exploit 1

Patch 1

Other 1

  • TI-2026-39558 Deserialization of untrusted data in netbox-community devicetype-library CVSS 3.1CRITICAL 9.6
  • TI-2026-23330 NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin CVSS 4.0HIGH 8.7
  • TI-2026-39924 Code injection in netbox-community devicetype-library CVSS 3.1MEDIUM 6.5
  • TI-2026-58964 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs CVSS 4.0HIGH 7.1
  • TI-2026-84457 Broken access control in NetBox bulk component creation CVSS 4.0MEDIUM 5.3
  • TI-2026-39685 Uncontrolled search path in netbox-community devicetype-library CVSS 3.1HIGH 8.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences