CVE-2025-7079

CVE-2025-7079 is a high-severity vulnerability affecting mao888 bluebell-plus up to version 2.3.0, specifically within the JWT Token Handler component. It involves the use of a hard-coded password in the bluebell_backend/pkg/jwt/jwt.go file, which can be manipulated remotely. While the attack complexity is high and exploitation is difficult, successful exploitation could lead to high impacts on confidentiality, integrity, and availability. Although public exploit details exist, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.