In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| appwrite-cli(npm) | 0 | 3.0.0 | N/A |
| appwrite(PyPI) | 0 | 3.0.0 | N/A |
CVSS Metrics