CVE-2024-34529

Nebari prints temporary Keycloak root password

4.8 MediumFix available

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.35%Up 0.3 points since May 6, 2024

What each source reports

CVE List Score used 4.8

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: CVE-2024-34529
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2024-0216 4.8

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: EUVD-2024-0216
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vjc4-3vgx-pq9h 4.8

Nebari prints temporary Keycloak root password

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: GHSA-vjc4-3vgx-pq9h
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

NVD 4.8

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: CVE-2024-34529
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSV 4.8

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: CVE-2024-34529
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVGHSA-vjc4-3vgx-pq9h 4.8

Nebari prints temporary Keycloak root password

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: GHSA-vjc4-3vgx-pq9h
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSVPYSEC-2024-185 No score

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Record: PYSEC-2024-185
Updated: 2026-11-02

Affected products

nebari

Affected packages

Affected packages
Package	Affected	Fixed
`nebari` PyPI	through 2024.4.1	None known
`nebari` PyPI	through 2024.4.1, plus listed versions 0.0.12022.10.12022.10.1rc12022.10.1rc22022.11.1 Show 34 moreShow less 2022.11.1rc12022.11.1rc42023.1.12023.1.1rc12023.10.12023.10.1rc12023.11.12023.11.1rc12023.12.12023.12.1rc12023.4.12023.4.1a42023.4.1a52023.5.12023.5.1rc12023.7.12023.7.1rc12023.7.22023.7.2rc12023.9.1rc12024.1.12024.1.1rc12024.1.1rc22024.1.1rc32024.1.1rc42024.1.1rc52024.3.12024.3.1rc12024.3.1rc22024.3.22024.3.2rc12024.3.32024.3.3rc12024.4.1rc1	None known
`nebari` PyPI	before 2024.6.1rc2, plus listed versions 0.0.12022.10.12022.10.1rc12022.10.1rc22022.11.1 Show 38 moreShow less 2022.11.1rc12022.11.1rc42023.1.12023.1.1rc12023.10.12023.10.1rc12023.11.12023.11.1rc12023.12.12023.12.1rc12023.4.12023.4.1a42023.4.1a52023.5.12023.5.1rc12023.7.12023.7.1rc12023.7.22023.7.2rc12023.9.1rc12024.1.12024.1.1rc12024.1.1rc22024.1.1rc32024.1.1rc42024.1.1rc52024.3.12024.3.1rc12024.3.1rc22024.3.22024.3.2rc12024.3.32024.3.3rc12024.4.12024.4.1rc12024.5.12024.5.1rc12024.6.1rc1	2024.6.1rc2

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-34529 is a medium vulnerability (CVSS 4.8) in Nebari, published May 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in nebari 2024.6.1rc2.

Attack profile

How easy it is to exploit

What an attacker can affect

Exploit likelihood

What each source reports

Affected products

Affected packages

History

In short

References