CyberRota Analysis
AI-GeneratedDocker deployments using the VPS.org one-click Supabase template are vulnerable due to a PostgreSQL instance being exposed on all network interfaces with a default password of "postgres." This critical misconfiguration allows unauthorized access to the database, circumventing typical host firewall protections. Organizations utilizing this template should prioritize remediation to prevent potential data breaches and unauthorized database manipulation.
Original NVD Description
Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.