CVE-2023-50974: Appwrite Command Line Interface

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

Affected products

• Appwrite Command Line Interface: before 3.0.0 (fixed in 3.0.0)

Published 2024-01-09. Last modified 2026-06-17.