CVE-2025-8077 NeuVector admin account has insecure default password
Attackers can use the fixed default admin password to gain full control of NeuVector if the password is not changed after deployment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-8077?
CVE-2025-8077 is a critical vulnerability in SUSE neuvector, published on 17 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default credentials to obtain an authentication token. This token can then be used to perform any operation via NeuVector APIs.
Weakness: CWE-1393
Which versions are affected by CVE-2025-8077?
3 open source packages ship an affected version, including github.com/neuvector/neuvector.
| Package | Affected | Fixed in |
|---|---|---|
github.com/neuvector/neuvector Go | All versions | None |
github.com/neuvector/neuvector Go | All versions | 0.0.0-20250825191744-da1a462074c3 |
github.com/neuvector/neuvector Go | All versions | 0.0.0-20250825191744-da1a462074c3 |
How do I fix CVE-2025-8077?
Upgrade github.com/neuvector/neuvector to 0.0.0-20250825191744-da1a462074c3 or later.
Is CVE-2025-8077 being exploited?
There is no known exploitation of CVE-2025-8077 in the wild and no public exploit code.
Sources
Also known as GHSA-8pxw-9c75-6w56, GO-2025-3918.