Use of Hard-coded Credentials in SmartIT Desktop Manager

Executive Summary

CVE-2026-85146 is a critical vulnerability in Lightstar SmartIT Desktop Manager version 10 and earlier. It involves the use of hard-coded credentials, allowing unauthenticated remote attackers to obtain SSH service account credentials and passwords directly from the application's source code.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect the SmartIT Desktop Manager application source code for hard-coded credentials. Search for strings like 'password', 'ssh', or 'credential' in configuration files or binaries. Use commands like 'grep -r "password" /path/to/smartit/desktop/manager' or 'strings /path/to/smartit/agent | grep -i ssh' to identify potential hard-coded credentials.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated remote attackers could gain access to sensitive system credentials, potentially leading to unauthorized access, data breaches, or control over affected systems. This could result in data theft, service disruption, or further network compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage due to potential data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update SmartIT Desktop Manager to version 11 or later as recommended by the vendor. Disable SSH access to the SmartIT Agent if not required. Restrict network access to the application using firewalls. Rotate all exposed credentials and monitor for unauthorized access.

Useful 0 Not Useful 0