CVE-2025-35042CWE-1392

Airship AI Acropolis default credentials

Critical · published September 22, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

🚨 Default admin credentials alert! Every installation of Airship AI Acropolis comes with the same admin account—you might as well leave the front door wide open! 🔥 Think of it like a hotel that hands out the same master key to every guest. If no one changes it, anyone can waltz in and access all the rooms—and who knows what they might find! An attacker could simply log in with the default credentials, gaining full administrative access to your system. Once inside, they could change settings, access sensitive data, or even take over the entire application! The potential damage is absolutely devastating!

Put simply

Think of it like a hotel that hands out the same master key to every guest. If no one changes it, anyone can waltz in and access all the rooms—and who knows what they might find! This vulnerability stems from Airship AI Acropolis shipping with a default admin account that retains the same password across all installations, allowing any remote attacker who knows the credentials to easily log in and control the system.

What to do

An attacker could simply log in with the default credentials, gaining full administrative access to your system. Once inside, they could change settings, access sensitive data, or even take over the entire application! The potential damage is absolutely devastating! Immediately change the default admin password on your Airship AI instances if you haven’t done so already. Make sure to update to patched versions 10.2.35, 11.0.21, or 11.1.9 to secure your application against this critical flaw! You've got this! Follow these steps, and you'll have your system locked down in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-09-22T15:57Z
EPSS history
Timeline
  • 22 SEP 15:57Z
    Airship AI Acropolis default credentials
    cvelistv5