CVE-2025-66454: Hardcoded Secret Default Or Fallbackcve-2025-66454-hardcoded-secret-default-or-fallback
A hardcoded default value is provided for a secret. This exposes the application to authentication bypass if a custom secret is not configured, as attackers can forge valid tokens or credentials using the known default value. Ensure that secrets default to None or securely generated values, and enforce that they are explicitly configured in production.
