CVE-2025-41702 - egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

Back Back to CVE browser

CRITICAL

egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

Published Aug 26, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.52%

Description

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

Affected products

Vendor Welotec Product EG503L Default
unaffected
Affected
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG503L-G Default
unaffected
Affected
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product Eg503l 4gb Default
unaffected
Affected
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG503W Default
unaffected
Affected
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product Eg503w 4gb Default
unaffected
Affected
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG602L Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG602W Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG603L Mk2 Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG603W Mk2 Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG802W Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG802W i7 512GB DinRail Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG802W i7 512GB w/o DinRail Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG804W Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product EG804W Pro Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ v1.8.0, < v1.8.2
Vendor Welotec Product n/a Default
unaffected
Affected
- ≥ 0.0.0, < <v1.7.7
- ≥ 0.0.0, < v1.7.7
- ≥ v1.8.0, < v1.8.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Welotec	EG503L	unaffected	Affected ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG503L-G	unaffected	Affected ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	Eg503l 4gb	unaffected	Affected ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG503W	unaffected	Affected ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	Eg503w 4gb	unaffected	Affected ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG602L	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG602W	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG603L Mk2	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG603W Mk2	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG802W	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG802W i7 512GB DinRail	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG802W i7 512GB w/o DinRail	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG804W	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	EG804W Pro	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ v1.8.0, < v1.8.2
Welotec	n/a	unaffected	Affected ≥ 0.0.0, < <v1.7.7 ≥ 0.0.0, < v1.7.7 ≥ v1.8.0, < v1.8.2