CVE-2025-10560
CRITICAL EPSS 30.7%
Published Jun 18, 20262w ago · Modified Jun 23, 20261w ago
9.3 CVSS 4.0
Published Jun 18, 2026 2w ago
Last Modified Jun 23, 2026 1w ago
Description
Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps client application binaries. The exposed credentials included AWS access keys, S3 bucket names, and related cloud access information. The originally exposed AWS credentials authenticated as the AWS account root identity and provided access to Worksnaps production cloud resources, including S3 buckets containing sensitive data such as screenshots of user desktops. An attacker with access to the affected client binaries could extract or recover the credentials and use them to access affected Worksnaps cloud resources.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
30.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-798 Use of Hard-coded Credentials Authentication
References 3
- seclists.org http://seclists.org/fulldisclosure/2026/Jun/21
- r.sec-consult.com https://r.sec-consult.com/worksnaps
- worksnaps.net https://www.worksnaps.net/www/download.shtml
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.