[{"data":1,"prerenderedAt":275},["ShallowReactive",2],{"blog-security-advisory-jan-2026":3},{"id":4,"title":5,"author":6,"body":7,"category":255,"date":256,"description":257,"extension":258,"featured":259,"image":260,"locale":260,"meta":261,"modified":260,"navigation":262,"path":263,"readingTime":264,"seo":265,"sitemap":266,"slug":260,"stem":267,"tags":268,"__hash__":274},"blog\u002Fblog\u002Fsecurity-advisory-jan-2026.md","Security Advisory: Update to Open-AudIT 5.6.2 or 6.0.1","Open-AudIT Security Team",{"type":8,"value":9,"toc":243},"minimark",[10,30,33,38,41,44,48,70,74,85,88,100,104,109,148,161,165,171,175,178,203,210,214,217,221,232,239],[11,12,13,17,18,21,22,25,26,29],"p",{},[14,15,16],"strong",{},"Severity:"," High\n",[14,19,20],{},"CVE:"," CVE-2026-00142 (pending NVD publication)\n",[14,23,24],{},"Affected versions:"," Open-AudIT \u003C 5.6.2 and \u003C 6.0.1\n",[14,27,28],{},"Fixed in:"," 5.6.2, 6.0.1",[31,32],"hr",{},[34,35,37],"h2",{"id":36},"summary","Summary",[11,39,40],{},"A vulnerability has been identified in the Open-AudIT credential storage subsystem that could allow an authenticated user with administrator privileges to read encrypted credentials in plaintext under specific conditions.",[11,42,43],{},"We are not aware of any active exploitation of this vulnerability in the wild.",[34,45,47],{"id":46},"impact","Impact",[49,50,51,58,64],"ul",{},[52,53,54,57],"li",{},[14,55,56],{},"Authentication required:"," Yes. This issue requires a valid administrator account",[52,59,60,63],{},[14,61,62],{},"Network exposure:"," Only exploitable from within the Open-AudIT web interface",[52,65,66,69],{},[14,67,68],{},"Data at risk:"," SNMP community strings and WMI passwords stored as credentials in Open-AudIT",[34,71,73],{"id":72},"mitigation","Mitigation",[11,75,76,77,80,81,84],{},"Update to ",[14,78,79],{},"Open-AudIT 5.6.2"," or ",[14,82,83],{},"Open-AudIT 6.0.1"," immediately.",[11,86,87],{},"If you are unable to upgrade immediately, as a temporary mitigation:",[89,90,91,94,97],"ol",{},[52,92,93],{},"Restrict Open-AudIT web interface access to trusted IP addresses via your firewall or web server configuration",[52,95,96],{},"Audit your administrator accounts and remove any accounts that should not have admin access",[52,98,99],{},"Rotate all SNMP community strings and WMI passwords stored in Open-AudIT after upgrading",[34,101,103],{"id":102},"upgrading","Upgrading",[105,106,108],"h3",{"id":107},"ubuntudebian","Ubuntu\u002FDebian",[110,111,116],"pre",{"className":112,"code":113,"language":114,"meta":115,"style":115},"language-bash shiki shiki-themes github-dark github-dark","sudo apt update\nsudo apt install open-audit\n","bash","",[117,118,119,135],"code",{"__ignoreMap":115},[120,121,124,128,132],"span",{"class":122,"line":123},"line",1,[120,125,127],{"class":126},"sFR8T","sudo",[120,129,131],{"class":130},"s4wv1"," apt",[120,133,134],{"class":130}," update\n",[120,136,138,140,142,145],{"class":122,"line":137},2,[120,139,127],{"class":126},[120,141,131],{"class":130},[120,143,144],{"class":130}," install",[120,146,147],{"class":130}," open-audit\n",[11,149,150,151,154,155,160],{},"Or download the updated ",[117,152,153],{},".deb"," from ",[156,157,159],"a",{"href":158},"\u002Fdownload\u002F","open-audit.org\u002Fdownload\u002F",".",[105,162,164],{"id":163},"windows","Windows",[11,166,167,168,170],{},"Download and run the updated installer from ",[156,169,159],{"href":158},". The installer will preserve your existing data and configuration.",[105,172,174],{"id":173},"verify-your-version","Verify your version",[11,176,177],{},"After upgrading, confirm you are running the patched version:",[110,179,181],{"className":112,"code":180,"language":114,"meta":115,"style":115},"# Check the version file\ncat \u002Fvar\u002Fwww\u002Fhtml\u002Fopen-audit\u002Fversion.txt\n# Expected output: 5.6.2 or 6.0.1\n",[117,182,183,189,197],{"__ignoreMap":115},[120,184,185],{"class":122,"line":123},[120,186,188],{"class":187},"sJ8bj","# Check the version file\n",[120,190,191,194],{"class":122,"line":137},[120,192,193],{"class":126},"cat",[120,195,196],{"class":130}," \u002Fvar\u002Fwww\u002Fhtml\u002Fopen-audit\u002Fversion.txt\n",[120,198,200],{"class":122,"line":199},3,[120,201,202],{"class":187},"# Expected output: 5.6.2 or 6.0.1\n",[11,204,205,206,209],{},"Or check ",[14,207,208],{},"Admin → About"," in the Open-AudIT web interface.",[34,211,213],{"id":212},"credits","Credits",[11,215,216],{},"This vulnerability was responsibly disclosed by a member of the open-source security community. We thank them for following responsible disclosure practices.",[34,218,220],{"id":219},"contact","Contact",[11,222,223,224,228,229,160],{},"If you have questions about this advisory, please contact the security team via ",[156,225,227],{"href":226},"mailto:security@firstwave.com","security@firstwave.com"," or open a GitHub issue marked ",[117,230,231],{},"[security]",[11,233,234,235,238],{},"Do ",[14,236,237],{},"not"," post exploit details in public forums until a patch has been available for at least 30 days.",[240,241,242],"style",{},"html pre.shiki code .sFR8T, html code.shiki .sFR8T{--shiki-default:#B392F0;--shiki-dark:#B392F0}html pre.shiki code .s4wv1, html code.shiki .s4wv1{--shiki-default:#9ECBFF;--shiki-dark:#9ECBFF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sJ8bj, html code.shiki .sJ8bj{--shiki-default:#6A737D;--shiki-dark:#6A737D}",{"title":115,"searchDepth":137,"depth":137,"links":244},[245,246,247,248,253,254],{"id":36,"depth":137,"text":37},{"id":46,"depth":137,"text":47},{"id":72,"depth":137,"text":73},{"id":102,"depth":137,"text":103,"children":249},[250,251,252],{"id":107,"depth":199,"text":108},{"id":163,"depth":199,"text":164},{"id":173,"depth":199,"text":174},{"id":212,"depth":137,"text":213},{"id":219,"depth":137,"text":220},"Security","2026-01-08","A security advisory for Open-AudIT versions prior to 5.6.2 and 6.0.1. We recommend all users upgrade immediately.","md",false,null,{},true,"\u002Fblog\u002Fsecurity-advisory-jan-2026",4,{"title":5,"description":257},{"loc":263},"blog\u002Fsecurity-advisory-jan-2026",[269,270,271,272,273],"security","advisory","CVE","patch","urgent","evtBILrrvQPnnO4gMASzs5hh5HoQLDZ2KcVtklAYk_Y",1792632800096]