CVE-2021-39174

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various passwords (email, database, etc). This issue was addressed in version 2.5.1 by improving `UpdateConfigCommandHandler` and preventing the use of nested variables in the resulting dotenv configuration file. As a workaround, only allow trusted source IP addresses to access to the administration dashboard.

• CWE-75

• https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/Exploit, Third Party Advisory
• https://github.com/fiveai/Cachet/releases/tag/v2.5.1Release Notes, Third Party Advisory
• https://github.com/fiveai/Cachet/security/advisories/GHSA-88f9-7xxh-c688Third Party Advisory
• https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/Exploit, Third Party Advisory
• https://github.com/fiveai/Cachet/releases/tag/v2.5.1Release Notes, Third Party Advisory
• https://github.com/fiveai/Cachet/security/advisories/GHSA-88f9-7xxh-c688Third Party Advisory

Published

Aug 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39169Misskey is a decentralized microblogging platform. In versio…5.4
• CVE-2021-3917A flaw was found in the coreos-installer, where it writes th…5.5
• CVE-2021-39170Pimcore is an open source data & experience management platf…5.4
• CVE-2021-39171Passport-SAML is a SAML 2.0 authentication provider for Pass…7.5
• CVE-2021-39172Cachet is an open source status page system. Prior to versio…8.8
• CVE-2021-39173Cachet is an open source status page system. Prior to versio…8.8
• CVE-2021-39175HedgeDoc is a platform to write and share markdown. In versi…6.1
• CVE-2021-39176detect-character-encoding is a package for detecting charact…7.5
• CVE-2021-39177Geyser is a bridge between Minecraft: Bedrock Edition and Mi…9.8
• CVE-2021-39178Next.js is a React framework. Versions of Next.js between 10…6.1
• CVE-2021-39179DHIS 2 is an information system for data capture, management…8.8
• CVE-2021-3918json-schema is vulnerable to Improperly Controlled Modificat…9.8