Login Request a demo
Critical severity · published Sep 17, 2025
CVE-2025-8077
NeuVector admin account has insecure default password
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default credentials to obtain an authentication token. This token can then be used to perform any operation via NeuVector APIs.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
neuvector · SUSE
5.0.0 before 5.4.6 · source: vendor
Affected product
NE
neuvector
SUSE
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8077
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8077
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-8077
github.com
https://github.com/neuvector/neuvector/security/advisories/GHSA-8pxw-9c75-6w56
More from neuvector
9.9
CVE-2025-54469
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
8.8
CVE-2026-78424
OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
8.8
CVE-2026-78428
Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
8.8
CVE-2025-66001
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
8.6
CVE-2025-54470
NeuVector telemetry sender is vulnerable to MITM and DoS