CyberSecBulletin

Airship AI vulnerabilities

We track 2 vulnerabilities in Airship AI products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2025.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Airship AI vulnerabilities

  • 9.8 Critical severity

    Acropolis: Use of Default Credentials

    CVE-2025-35042Airship AI

    Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Instances of Airship AI that do not change this account password are vulnerable to a remote attacker logging in and gaining the privileges of t

  • 7.5 High severity

    Acropolis: Improper Restriction of Excessive Authentication Attempts

    CVE-2025-35041Airship AI

    Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9.