CVE-2026-93969 — aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation lea…
Published: 2026-09-20 · CVSS: 6.9 · CVSS 4.0
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is recommended to apply a patch to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7