Medium severity5.3NVD Advisory· Published Oct 11, 2026

CVE-2026-108584

Description

A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FunnyWolf/Viperllm-create
Range: <=3.1.11

Patches

Vulnerability mechanics

References

github.com/Randark-JMT/vulnerability-reports/blob/main/advisories/2026-09-02-viper-docker-git-credential-leak.mdnvd
vuldb.com/cve/CVE-2026-108584nvd
vuldb.com/submit/956815nvd
vuldb.com/vuln/416236nvd
vuldb.com/vuln/416236/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000