Security: Critical Findings

New issue

CRITICAL severity security issues that pose active risk to infrastructure. These should be remediated immediately — exposed credentials, privileged containers, unauthenticated services.

2026-05-19

0% Completed

[HIGH] POSTGRES_HOST_AUTH_METHOD set to 'trust' in Hudu config

area:security

priority:critical

type:bug

#16 opened 2026-05-05 15:44:08 -05:00 by pjennings

[HIGH] Hardcoded password hash committed to repository for rnetadmin user

area:security

priority:critical

type:bug

#15 opened 2026-05-05 15:43:32 -05:00 by pjennings

[HIGH] Docker socket mounted into Forgejo Runner and Wings containers

area:security

priority:critical

type:bug

#14 opened 2026-05-05 15:43:32 -05:00 by pjennings

[CRITICAL] Valkey (Redis) exposed on mesh network without authentication

area:security

priority:critical

type:bug

#13 opened 2026-05-05 15:43:31 -05:00 by pjennings

[CRITICAL] Weak default PostgreSQL credentials in example secrets

area:security

priority:critical

type:bug

#12 opened 2026-05-05 15:43:14 -05:00 by pjennings

[CRITICAL] Passwordless sudo for wheel group on all hosts

area:security

priority:critical

type:bug

#11 opened 2026-05-05 15:43:14 -05:00 by pjennings

[CRITICAL] Secrets stored as plaintext in world-readable Nix store

area:security

priority:critical

type:bug

#10 opened 2026-05-05 15:42:59 -05:00 by pjennings

[CRITICAL] Forgejo Runner runs privileged with Docker socket

area:security

priority:critical

type:bug

#9 opened 2026-05-05 15:42:43 -05:00 by pjennings