CyberRota Analysis
AI-GeneratedWolfStack versions prior to 25.9.2 contain a hard-coded authentication secret that allows remote unauthenticated attackers to bypass security measures by using this secret in the X-WolfStack-Secret header. This vulnerability enables attackers to access the management port of affected nodes, enumerate Docker and LXC containers, and execute arbitrary commands as root within any container. Organizations utilizing WolfStack should prioritize immediate remediation to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth() gate without any session, API key, or user account. Attackers can reach an affected node's management port to enumerate all Docker and LXC containers on the host and execute arbitrary commands as root inside any container via the POST /api/containers/{runtime}/{id}/exec endpoint.