CVE-2026-74756

2026-11-06

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience.

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup.

Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience.