CVE-2021-40494: Adaptivescale Lxdui

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.

Affected products

• Adaptivescale Lxdui: up to and including 2.1.3

Published 2021-09-03. Last modified 2026-06-17.