Automai Director Privilege Escalation Vulnerability Allowing Unauthorized Access to Sensitive Information

A vulnerability in Automai Director version 25.2.0 allows remote attackers to escalate privileges and access sensitive information by exploiting a crafted JavaScript file. This issue arises from hard-coded credentials within the application, which can be used to bypass authentication mechanisms and gain unauthorized access.

Impact

Exploitation of this vulnerability could lead to unauthorized access and privilege escalation within the application, allowing attackers to access sensitive data and potentially manipulate it. Additionally, such access could facilitate lateral movement within connected systems.