A critical hard-coded credential vulnerability in WolfStack allows unauthenticated attackers to achieve full administrative control and remote code execution on the host.

The application utilizes a hard-coded secret for cluster authentication, which is exposed in the source code. This flaw allows unauthenticated attackers to bypass all authentication gates and interact with the management API to execute commands on host containers.

The presence of a hard-coded administrative secret renders the entire deployment insecure by default. With a CVSS score of 9.8, this vulnerability poses an extreme risk, as it permits full unauthorized access to containerized workloads, potentially leading to complete data exfiltration, service disruption, and total compromise of the host infrastructure.

Immediate Action: Upgrade to WolfStack version 25.9.2 or later immediately to remove the hard-coded credential and implement secure authentication mechanisms.

Proactive Monitoring: Monitor network traffic for unusual POST requests directed at the /api/containers/ management endpoint, specifically those containing the X-WolfStack-Secret header.

Compensating Controls: Restrict access to the WolfStack management port at the network layer using firewalls or VPNs to ensure only authorized administrative endpoints can reach the service.

Public Exploit Available: Unknown

This is a critical vulnerability that requires urgent patching. Given the simplicity of the attack vector, organizations running WolfStack must prioritize updating to version 25.9.2 to eliminate the exposure caused by the hard-coded secret.