CVE-2026-7041 | 666ghj MiroFish up to 0.1.2 Werkzeug Debugger PIN /console SECRET information disclosure (Issue 483)

A vulnerability, which was classified as problematic, has been found in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown function of the file /console of the component Werkzeug Debugger PIN Handler. Performing a manipulation of the argument SECRET results in information disclosure.

This vulnerability is cataloged as CVE-2026-7041. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is suggested to use restrictive firewalling.

The project was informed of the problem early through an issue report but has not responded yet.