# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OTP Bypass in Digital Operation Services' WifiBurada](https://agentprime.io/advisories/CVE-2025-13477.md)
  `CVE-2025-13477` · CVE record: Digital Operations Services Inc. WifiBurada · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: Information disclosure, Hard-coded credentials
- [CODESYS Visualization - Insufficiently Protected Credentials](https://agentprime.io/advisories/CVE-2026-0393.md)
  `CVE-2026-0393` · CVE record: CODESYS Visualization · CVSS 6.9 Medium · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml](https://agentprime.io/advisories/CVE-2026-9139.md)
  `CVE-2026-9139` · CVE record: Taiko Network Communications Pte Ltd. AG1000-01A SMS Alert Gateway · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 May 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in NVIDIA DGX Spark](https://agentprime.io/advisories/CVE-2026-24218.md)
  `CVE-2026-24218` · CVE record: NVIDIA DGX Spark · CVSS 8.1 High · Not analysed yet · Published 20 May 2026 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in ScadaBR](https://agentprime.io/advisories/CVE-2026-8605.md)
  `CVE-2026-8605` · CVE record: ScadaBR ScadaBR · CVSS 5.1 Medium · Not analysed yet · Published 19 May 2026 · Tags: Hard-coded credentials
- [HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack](https://agentprime.io/advisories/GHSA-x3x5-7h4h-gwxg.md)
  `GHSA-x3x5-7h4h-gwxg`, `CVE-2026-46511` · npm `@haxtheweb/haxcms-nodejs`: affected `<26.0.0`, fixed in `26.0.0` · CVSS 8.7 High · Not analysed yet · Published 19 May 2026 · Tags: Cross-site scripting (XSS), Hard-coded credentials, Information disclosure
- [HAXcms: Private Key Disclosure via Broken HMAC Implementation](https://agentprime.io/advisories/GHSA-6c8g-9hfh-pq5h.md)
  `GHSA-6c8g-9hfh-pq5h`, `CVE-2026-46395` · npm `@haxtheweb/haxcms-nodejs`: affected `<26.0.0`, fixed in `26.0.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Information disclosure, Hard-coded credentials, Weak cryptography or TLS
- [Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection](https://agentprime.io/advisories/CVE-2026-31986.md)
  `CVE-2026-31986` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Hard-coded credentials
- [ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351](https://agentprime.io/advisories/GHSA-c32j-vqhx-rx3x.md)
  `GHSA-c32j-vqhx-rx3x`, `CVE-2026-45363` · RubyGems `jwt`: affected `<2.10.3 || >=3.0.0, <3.2.0`, fixed in `2.10.3`, `3.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [Mattermost doesn't prevent disclosure of created user password](https://agentprime.io/advisories/GHSA-wvgv-4fc3-2rcp.md)
  `GHSA-wvgv-4fc3-2rcp`, `CVE-2026-6345`, `GO-2026-5727` · Go `github.com/mattermost/mattermost-server` and 1 more: affected `<5.3.2-0.20260311102650-3057ae7e83e9`, fixed in `5.3.2-0.20260311102650-3057ae7e83e9` · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: Hard-coded credentials
- [Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key](https://agentprime.io/advisories/CVE-2026-8739.md)
  `CVE-2026-8739` · CVE record: Sanluan PublicCMS · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Hard-coded credentials, CWE-320
- [slack-go \`SecretsVerifier\` accepts empty signing secret without precondition](https://agentprime.io/advisories/GHSA-gxhx-2686-5h9g.md)
  `GHSA-gxhx-2686-5h9g`, `GO-2026-5410` · Go `github.com/slack-go/slack`: affected `<0.23.1`, fixed in `0.23.1` · CVSS 4.0, no score published · Not analysed yet · Published 14 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication](https://agentprime.io/advisories/CVE-2025-62312.md)
  `CVE-2025-62312` · CVE record: HCL AION · CVSS 3.0 Low · Not analysed yet · Published 14 May 2026 · Tags: Hard-coded credentials
- [FlowiseAI Exposes Basic Auth Credentials via API](https://agentprime.io/advisories/GHSA-php6-83fg-gw3g.md)
  `GHSA-php6-83fg-gw3g`, `CVE-2026-46440` · npm `flowise`: affected `<3.1.2`, fixed in `3.1.2` · CVSS 7.5 High · Not analysed yet · Published 14 May 2026 · Tags: Hard-coded credentials
- [Hardcoded credentials in Comarch ERP Optima](https://agentprime.io/advisories/CVE-2025-68421.md)
  `CVE-2025-68421` · CVE record: Comarch ERP Optima · CVSS 8.7 High · Not analysed yet · Published 14 May 2026 · Tags: Hard-coded credentials
- [Huawei HG630 V2 Router Authentication Bypass via Serial Number](https://agentprime.io/advisories/CVE-2020-37220.md)
  `CVE-2020-37220` · CVE record: www\.huawei.com HG630 V2 Router · CVSS 8.7 High · Not analysed yet · Published 13 May 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in ELECOM CO.,LTD. WRC-X1800GS-B and others](https://agentprime.io/advisories/CVE-2026-25107.md)
  `CVE-2026-25107` · CVE record: ELECOM CO.,LTD. WRC-X1800GS-B and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: Hard-coded credentials
- [proxy credentials leak over redirect-to proxy](https://agentprime.io/advisories/CVE-2026-6253.md)
  `CVE-2026-6253` · CVE record: curl curl · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2026-44278.md)
  `CVE-2026-44278` · CVE record: Fortinet FortiClientWindows · CVSS 2.1 Low · Not analysed yet · Published 12 May 2026 · Tags: Hard-coded credentials
- [JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter](https://agentprime.io/advisories/CVE-2026-43992.md)
  `CVE-2026-43992` · CVE record: Dragonmonk111 junoclaw · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Information disclosure, Hard-coded credentials
- [sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)](https://agentprime.io/advisories/GHSA-x3r2-fj3r-g5mv.md)
  `GHSA-x3r2-fj3r-g5mv`, `CVE-2026-45091` · Maven `io.github.davidalmeidac:sealed-env-core` and 1 more: affected `<0.1.0-alpha.4`, fixed in `0.1.0-alpha.4` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Information disclosure, Hard-coded credentials
- [LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects](https://agentprime.io/advisories/CVE-2026-8368.md)
  `CVE-2026-8368` · CVE record: OALDERS LWP::UserAgent · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Hard-coded credentials
- [Hard-coded credentials in Siemens Teamcenter V2312 and others](https://agentprime.io/advisories/CVE-2026-33893.md)
  `CVE-2026-33893` · CVE record: Siemens Teamcenter V2312 and 4 more · CVSS 8.7 High · Not analysed yet · Published 12 May 2026 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Siemens blueplanet 100 NX3 M8 and others](https://agentprime.io/advisories/CVE-2025-40946.md)
  `CVE-2025-40946` · CVE record: Siemens blueplanet 100 NX3 M8 and 4 more · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Apple macOS](https://agentprime.io/advisories/CVE-2026-28961.md)
  `CVE-2026-28961` · CVE record: Apple macOS · CVSS 4.6 Medium · Not analysed yet · Published 11 May 2026 · Tags: Hard-coded credentials
- [SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools](https://agentprime.io/advisories/CVE-2026-42869.md)
  `CVE-2026-42869` · CVE record: socfortress CoPilot · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Meari SDK hardcoded cryptographic keys](https://agentprime.io/advisories/CVE-2026-33362.md)
  `CVE-2026-33362` · CVE record: Meari com.meari.sdk · CVSS 8.6 High · Not analysed yet · Published 11 May 2026 · Tags: Hard-coded credentials
- [Hard-coded credentials in Dell ECS and others](https://agentprime.io/advisories/CVE-2026-40636.md)
  `CVE-2026-40636` · CVE record: Dell ECS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2026 · Tags: Hard-coded credentials
- [Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key](https://agentprime.io/advisories/CVE-2026-8243.md)
  `CVE-2026-8243` · CVE record: Industrial Application Software IAS Canias ERP · CVSS 6.9 Medium · Not analysed yet · Published 10 May 2026 · Tags: Hard-coded credentials, CWE-320
- [@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry](https://agentprime.io/advisories/GHSA-qhh4-458h-xwh2.md)
  `GHSA-qhh4-458h-xwh2` · npm `@cyclonedx/cdxgen`: affected `>=9.9.5, <12.3.3`, fixed in `12.3.3` · CVSS 4.0, no score published · Not analysed yet · Published 8 May 2026 · Tags: Hard-coded credentials, CWE-346
- [Weak credentials vulnerability in the CashDro 3 web administration panel](https://agentprime.io/advisories/CVE-2026-8076.md)
  `CVE-2026-8076` · CVE record: CashDro CashDro 3 Administration Panel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Hard-coded credentials
- [yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).](https://agentprime.io/advisories/CVE-2024-46508.md)
  `CVE-2024-46508` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 May 2026 · Tags: Hard-coded credentials
- [Hardcoded credentials in Yarbo robot firmware](https://agentprime.io/advisories/CVE-2026-7414.md)
  `CVE-2026-7414` · CVE record: Yarbo Firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Hard-coded credentials
- [fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver](https://agentprime.io/advisories/GHSA-gmvf-9v4p-v8jc.md)
  `GHSA-gmvf-9v4p-v8jc`, `CVE-2026-44351` · npm `fast-jwt`: affected `<6.2.4`, fixed in `6.2.4` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials](https://agentprime.io/advisories/CVE-2026-8032.md)
  `CVE-2026-8032` · CVE record: PicoTronica e-Clinic Healthcare System ECHS · CVSS 6.9 Medium · Not analysed yet · Published 6 May 2026 · Tags: Hard-coded credentials
- [Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process](https://agentprime.io/advisories/CVE-2026-6787.md)
  `CVE-2026-6787` · CVE record: WatchGuard WatchGuard Agent · CVSS 8.5 High · Not analysed yet · Published 6 May 2026 · Tags: Hard-coded credentials
- [HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability](https://agentprime.io/advisories/CVE-2025-62345.md)
  `CVE-2025-62345` · CVE record: HCL BigFix RunBookAI · CVSS 2.7 Low · Not analysed yet · Published 6 May 2026 · Tags: Hard-coded credentials
- [Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter](https://agentprime.io/advisories/CVE-2026-23927.md)
  `CVE-2026-23927` · CVE record: Zabbix Zabbix · CVSS 5.1 Medium · Not analysed yet · Published 6 May 2026 · Tags: Hard-coded credentials
- [gix-transport: HTTP credentials leaked to redirected host in curl backend](https://agentprime.io/advisories/GHSA-9857-6mw7-fq2m.md)
  `GHSA-9857-6mw7-fq2m`, `CVE-2026-82255` · crates.io `gix-transport`: affected `>=0.25.4, <0.56.0`, fixed in `0.56.0` · CVSS 7.6 High · Not analysed yet · Published 5 May 2026 · Tags: Hard-coded credentials
- [ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key](https://agentprime.io/advisories/GHSA-8pqq-224h-x875.md)
  `GHSA-8pqq-224h-x875` · PyPI `ogham-mcp`: affected `>=0.6.3, <0.11.1`, fixed in `0.11.1` · No CVSS score · Not analysed yet · Published 5 May 2026 · Tags: Hard-coded credentials
- [Argo vulnerable to exposure of artifact repository credentials](https://agentprime.io/advisories/GHSA-7vf8-2cr6-54mf.md)
  `GHSA-7vf8-2cr6-54mf`, `BIT-argo-workflows-2026-42295`, `CVE-2026-42295`, `GO-2026-5235` · Go `github.com/argoproj/argo-workflows/v4`: affected `>=4.0.0, <4.0.5`, fixed in `4.0.5` · CVSS 8.5 High · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning](https://agentprime.io/advisories/CVE-2026-32834.md)
  `CVE-2026-32834` · CVE record: Scott Paterson easy-paypal-events-tickets · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials](https://agentprime.io/advisories/CVE-2026-42376.md)
  `CVE-2026-42376` · CVE record: D-Link DIR-456U Firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials](https://agentprime.io/advisories/CVE-2026-42375.md)
  `CVE-2026-42375` · CVE record: D-Link DIR-600L Firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials](https://agentprime.io/advisories/CVE-2026-42374.md)
  `CVE-2026-42374` · CVE record: D-Link DIR-600L Firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials](https://agentprime.io/advisories/CVE-2026-42373.md)
  `CVE-2026-42373` · CVE record: D-Link DIR-605L Firmware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials](https://agentprime.io/advisories/CVE-2026-42372.md)
  `CVE-2026-42372` · CVE record: D-Link DIR-605L Firmware · CVSS 8.8 High · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials](https://agentprime.io/advisories/CVE-2026-42367.md)
  `CVE-2026-42367` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 6.5 Medium · Not analysed yet · Published 4 May 2026 · Tags: Hard-coded credentials
- [My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action](https://agentprime.io/advisories/CVE-2026-6446.md)
  `CVE-2026-6446` · CVE record: bplugins My Social Feeds – Social Feeds Embedder Plugin for WordPress · CVSS 5.4 Medium · Not analysed yet · Published 2 May 2026 · Tags: Hard-coded credentials
- [AstrBot Makes Use of Hard-coded Password](https://agentprime.io/advisories/GHSA-mq9q-25hm-g4gp.md)
  `GHSA-mq9q-25hm-g4gp`, `CVE-2026-7579`, `GHSA-vrqm-xcfv-286r`, `PYSEC-2026-2382` · PyPI `astrbot`: affected `<=4.16.0`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Apple macOS](https://agentprime.io/advisories/CVE-2026-28909.md)
  `CVE-2026-28909` · CVE record: Apple macOS · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Hard-coded credentials
- [Information Disclosure Vulnerability in e-Sushrut HMIS](https://agentprime.io/advisories/CVE-2026-42518.md)
  `CVE-2026-42518` · CVE record: CDAC-Noida e-Sushrut, Hospital Management Information System (HMIS) · CVSS 8.7 High · Not analysed yet · Published 29 Apr 2026 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Dell iDRAC10](https://agentprime.io/advisories/CVE-2026-35155.md)
  `CVE-2026-35155` · CVE record: Dell iDRAC10 · CVSS 7.1 High · Not analysed yet · Published 29 Apr 2026 · Tags: Hard-coded credentials
- [WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints](https://agentprime.io/advisories/CVE-2026-41446.md)
  `CVE-2026-41446` · CVE record: Snap One, LLC WattBox 800 and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Apr 2026 · Tags: Hard-coded credentials, CWE-912
- [Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key](https://agentprime.io/advisories/CVE-2026-7306.md)
  `CVE-2026-7306` · CVE record: Xuxueli xxl-job · CVSS 6.3 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Hard-coded credentials, CWE-320
- [Milesight Cameras Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2026-32644.md)
  `CVE-2026-32644` · CVE record: Milesight MS-Cxx63-PD and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Apr 2026 · Tags: Hard-coded credentials
- [Milesight Cameras Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2026-27785.md)
  `CVE-2026-27785` · CVE record: Milesight MS-Cxx63-PD and 4 more · CVSS 7.7 High · Not analysed yet · Published 27 Apr 2026 · Tags: Hard-coded credentials
- [tufantunc ssh-mcp Command Line index.ts insufficiently protected credentials](https://agentprime.io/advisories/CVE-2026-7038.md)
  `CVE-2026-7038` · CVE record: tufantunc ssh-mcp · CVSS 4.8 Medium · Not analysed yet · Published 26 Apr 2026 · Tags: Hard-coded credentials
- [Datavane Datavines JWT Token TokenManager.java hard-coded key](https://agentprime.io/advisories/CVE-2026-7018.md)
  `CVE-2026-7018` · CVE record: Datavane Datavines · CVSS 6.3 Medium · Not analysed yet · Published 26 Apr 2026 · Tags: Hard-coded credentials, CWE-320
- [OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests](https://agentprime.io/advisories/GHSA-h2vw-ph2c-jvwf.md)
  `GHSA-h2vw-ph2c-jvwf`, `CVE-2026-44992` · npm `openclaw`: affected `>=2026.4.5, <2026.4.20`, fixed in `2026.4.20` · CVSS 4.1 Medium · Not analysed yet · Published 25 Apr 2026 · Tags: Hard-coded credentials, CWE-15, CWE-441

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDI2LTA0LTI1VDIzOjUwOjEwLjAwMDAwMFoiLCJHSFNBLWgydnctcGgyYy1qdndmIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDI2LTA1LTIxVDE3OjEwOjU1LjM5ODAwMFoiLCJDVkUtMjAyNi00ODI0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDI2LTA1LTIxVDE3OjEwOjU1LjM5ODAwMFoiLCJDVkUtMjAyNi00ODI0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.