Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: IceWhaleTech Component: Casaos Clear all filters
TI-2025-24320 CVE-2025-34171 · GHSA-9w9c-6cc9-mc59

CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure

Priority LOW 38

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00684 Published 2026-01-03 No fix listed CWE-497
TI-2023-19077 CVE-2023-37469 · GHSA-92vc-4fcw-g68q

CasaOS Command Injection vulnerability

Priority HIGH 73

CasaOS is an open-source personal cloud system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0158 Published 2023-08-24 Fixed in 0.4.4 CWE-77
TI-2023-18896 CVE-2023-37266 · GHSA-m5q5-8mfw-p2hr

Weak json web token (JWT) secrets in CasaOS

Priority MEDIUM 59

CasaOS is an open-source Personal Cloud system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06844 Published 2023-07-17 Fixed in 0.4.4 CWE-287