CVE-2026-108783: Panel default credentials

CISO Take

Amnezia-Web-Panel up to 1.6.2/1.7.2 ships default credentials on its Backup Download component in app.py, so an unauthenticated remote attacker can log in with well-known values and pull backups. The flaw is trivial to exploit (CVSS 7.3, network-reachable, no privileges, no user interaction), and a public write-up exists in a GitHub issue, but EPSS is unavailable, there is no CISA KEV listing, no Nuclei template and no SSVC decision, so there is no evidence of active exploitation yet. The vendor never answered the disclosure, so no patched version is known and you should not wait for one. Backups of a VPN management panel typically contain server configurations and keys, which makes any internet-exposed instance a priority. Find every deployment, change the default credentials immediately, restrict the panel to a management network or VPN, and rotate any keys or secrets stored in existing backups. The package has 506 downstream dependents and an OpenSSF Scorecard of 6.7/10, so the exposure is moderate rather than widespread.

Sources:NVDOpenSSFATLASvuldb.com

What is the risk?

Medium-high. Exploitation needs no privileges, no user interaction and low complexity, and a public disclosure exists. Impact is rated low for confidentiality, integrity and availability in the CVSS vector, but backups of a VPN management panel can leak secrets that raise the real impact. No KEV listing, EPSS data, public exploit tooling or Nuclei template is available, and the vendor has not responded, so no fix is known. The product is a VPN management panel rather than a core AI/ML component, so the AI-specific risk is indirect and depends on whether it fronts AI infrastructure.

How does the attack unfold?

Reconnaissance

The attacker scans for internet-exposed Amnezia-Web-Panel instances.

AML.T0006

Initial Access

The attacker logs in to the Backup Download function with default credentials.

AML.T0012

Collection

The attacker downloads backups containing server configurations, keys and secrets.

AML.T0037

Impact

The attacker uses the leaked keys to reach connected AI/ML hosts and move laterally.

AML.T0025

Reconnaissance

The attacker scans for internet-exposed Amnezia-Web-Panel instances.

AML.T0006

Initial Access

The attacker logs in to the Backup Download function with default credentials.

AML.T0012

Collection

The attacker downloads backups containing server configurations, keys and secrets.

AML.T0037

Impact

The attacker uses the leaked keys to reach connected AI/ML hosts and move laterally.

AML.T0025

What systems are affected?

Package	Ecosystem	Vulnerable Range	Patched
Panel	pip	—	No patch
5.8KOpenSSF 6.9512 dependentsPushed 7d ago67% patched~15d to patchFull package profile →

Do you use Panel? You're affected.

How severe is it?

CVSS 3.1

7.3 / 10

EPSS

0.4%

chance of exploitation in 30 days

Higher than 31% of all CVEs

Source: EPSS v3 — FIRST.org

Exploitation Status

Exploit Available

Exploitation: MEDIUM

Sophistication

Trivial

Exploitation Confidence

medium

○CISA SSVC: Public PoC

Composite signal derived from CISA KEV, VulnCheck KEV, CISA SSVC, EPSS, Metasploit, Exploit-DB, trickest/cve, Nuclei templates, and inthewild.io exploitation reports.

What is the attack surface?

AVNetwork

ACLow

PRNone

UINone

SUnchanged

CLow

ILow

ALow

What should I do?

1 step

1) Inventory all Amnezia-Web-Panel instances, especially internet-facing ones. 2) Change all default and initial credentials now and enforce strong unique passwords. 3) Restrict panel access with a firewall, IP allowlist, reverse proxy authentication or a private management network. 4) Review access logs for requests to the backup download endpoint from unknown sources and treat any hit as a possible compromise. 5) Rotate VPN keys, tokens and other secrets contained in existing backups. 6) Check the vendor repository for a fixed release since none is documented and the vendor has not responded; consider replacing the panel if it stays unpatched. 7) Add a detection rule for unauthenticated or default-credential logins to the panel.

What does CISA's SSVC say?

DecisionTrack*

Exploitationpoc

AutomatableYes

Technical Impactpartial

Source: CISA Vulnrichment (SSVC v2.0). Decision based on the CISA Coordinator decision tree.

How is it classified?

Auth BypassData LeakageFrameworkAML.T0012- Valid Accounts AML.T0049- Exploit Public-Facing Application AML.T0055- Unsecured Credentials

Which compliance frameworks are affected?

This CVE is relevant to:

ISO 42001

A.7.4-Quality of data for AI systems

NIST AI RMF

MANAGE 2.3-Responses to identified AI risks and unknown risks are managed

OWASP LLM Top 10

LLM03-Supply Chain

Frequently Asked Questions

What is CVE-2026-108783?

Amnezia-Web-Panel up to 1.6.2/1.7.2 ships default credentials on its Backup Download component in app.py, so an unauthenticated remote attacker can log in with well-known values and pull backups. The flaw is trivial to exploit (CVSS 7.3, network-reachable, no privileges, no user interaction), and a public write-up exists in a GitHub issue, but EPSS is unavailable, there is no CISA KEV listing, no Nuclei template and no SSVC decision, so there is no evidence of active exploitation yet. The vendor never answered the disclosure, so no patched version is known and you should not wait for one. Backups of a VPN management panel typically contain server configurations and keys, which makes any internet-exposed instance a priority. Find every deployment, change the default credentials immediately, restrict the panel to a management network or VPN, and rotate any keys or secrets stored in existing backups. The package has 506 downstream dependents and an OpenSSF Scorecard of 6.7/10, so the exposure is moderate rather than widespread.

Is CVE-2026-108783 actively exploited?

No confirmed active exploitation of CVE-2026-108783 has been reported, but organizations should still patch proactively.

How to fix CVE-2026-108783?

1) Inventory all Amnezia-Web-Panel instances, especially internet-facing ones. 2) Change all default and initial credentials now and enforce strong unique passwords. 3) Restrict panel access with a firewall, IP allowlist, reverse proxy authentication or a private management network. 4) Review access logs for requests to the backup download endpoint from unknown sources and treat any hit as a possible compromise. 5) Rotate VPN keys, tokens and other secrets contained in existing backups. 6) Check the vendor repository for a fixed release since none is documented and the vendor has not responded; consider replacing the panel if it stays unpatched. 7) Add a detection rule for unauthenticated or default-credential logins to the panel.

What systems are affected by CVE-2026-108783?

This vulnerability affects the following AI/ML architecture patterns: VPN management panels, remote access to model serving, training infrastructure administration.

What is the CVSS score for CVE-2026-108783?

CVE-2026-108783 has a CVSS v3.1 base score of 7.3 (HIGH). The EPSS exploitation probability is 0.38%.

What is the AI security impact?

Affected AI Architectures

VPN management panelsremote access to model servingtraining infrastructure administration

MITRE ATLAS Techniques

AML.T0012Valid Accounts

AML.T0049Exploit Public-Facing Application

AML.T0055Unsecured Credentials

Compliance Controls Affected

ISO 42001: A.7.4

NIST AI RMF: MANAGE 2.3

OWASP LLM Top 10: LLM03

What are the technical details?

Original Advisory

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploitation Scenario

An attacker scans for exposed Amnezia-Web-Panel instances, then logs in to the Backup Download function using the documented default credentials. They download the backup archive, which contains server configurations and keys. Using these, they connect to the VPN or management network that fronts an organization's ML training cluster or model-serving hosts. From there they move laterally to reach model artifacts, datasets and API keys.

Weaknesses (CWE)

CWE-1392Use of Default Credentials

CWE-1392 — Use of Default Credentials: The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

[Requirements] Prohibit use of default, hard-coded, or other values that do not vary for each installation of the product - especially for separate organizations.
[Architecture and Design] Force the administrator to change the credential upon installation.

Source: MITRE CWE corpus.