CVE-2026-90451

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An example environment-configuration file contains a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. If a deployment copies this example file into the active configuration without executing the setup routine to regenerate the value, the system uses the known default. This allows an attacker to forge valid authentication cookies for the component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Run the setup routine to regenerate the secret value instead of copying the example environment-configuration file directly into the active configuration.