SimStudioAI sim Password Protection deployment.ts weak hash_CVE-2026-13510

6.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.

Basic Information

ID CVE-2026-13510

Source VulDB

Published Jun 28, 2026 at 22:15

Affected Product

Vendor SimStudioAI

Product sim

Version 0.6.0

Affected Versions SimStudioAI sim 0.6.0
SimStudioAI sim 0.6.1
SimStudioAI sim 0.6.2
SimStudioAI sim 0.6.3
SimStudioAI sim 0.6.4
SimStudioAI sim 0.6.5
SimStudioAI sim 0.6.6
SimStudioAI sim 0.6.7
SimStudioAI sim 0.6.8
SimStudioAI sim 0.6.9
SimStudioAI sim 0.6.10
SimStudioAI sim 0.6.11
SimStudioAI sim 0.6.12
SimStudioAI sim 0.6.13
SimStudioAI sim 0.6.14
SimStudioAI sim 0.6.15
SimStudioAI sim 0.6.16
SimStudioAI sim 0.6.17
SimStudioAI sim 0.6.18
SimStudioAI sim 0.6.19
SimStudioAI sim 0.6.20
SimStudioAI sim 0.6.21
SimStudioAI sim 0.6.22
SimStudioAI sim 0.6.23
SimStudioAI sim 0.6.24
SimStudioAI sim 0.6.25
SimStudioAI sim 0.6.26
SimStudioAI sim 0.6.27
SimStudioAI sim 0.6.28
SimStudioAI sim 0.6.29
SimStudioAI sim 0.6.30
SimStudioAI sim 0.6.31
SimStudioAI sim 0.6.32
SimStudioAI sim 0.6.33
SimStudioAI sim 0.6.34
SimStudioAI sim 0.6.35
SimStudioAI sim 0.6.36
SimStudioAI sim 0.6.37
SimStudioAI sim 0.6.38
SimStudioAI sim 0.6.39
SimStudioAI sim 0.6.40
SimStudioAI sim 0.6.41
SimStudioAI sim 0.6.42
SimStudioAI sim 0.6.43
SimStudioAI sim 0.6.44
SimStudioAI sim 0.6.45
SimStudioAI sim 0.6.46
SimStudioAI sim 0.6.47
SimStudioAI sim 0.6.48
SimStudioAI sim 0.6.49
SimStudioAI sim 0.6.50
SimStudioAI sim 0.6.51
SimStudioAI sim 0.6.52
SimStudioAI sim 0.6.53
SimStudioAI sim 0.6.54
SimStudioAI sim 0.6.55
SimStudioAI sim 0.6.56
SimStudioAI sim 0.6.57
SimStudioAI sim 0.6.58
SimStudioAI sim 0.6.59
SimStudioAI sim 0.6.60
SimStudioAI sim 0.6.61
SimStudioAI sim 0.6.62
SimStudioAI sim 0.6.63
SimStudioAI sim 0.6.64
SimStudioAI sim 0.6.65
SimStudioAI sim 0.6.66
SimStudioAI sim 0.6.67
SimStudioAI sim 0.6.68
SimStudioAI sim 0.6.69
SimStudioAI sim 0.6.70
SimStudioAI sim 0.6.71
SimStudioAI sim 0.6.72
SimStudioAI sim 0.6.73
SimStudioAI sim 0.6.74
SimStudioAI sim 0.6.75
SimStudioAI sim 0.6.76
SimStudioAI sim 0.6.77
SimStudioAI sim 0.6.78
SimStudioAI sim 0.6.79
SimStudioAI sim 0.6.80
SimStudioAI sim 0.6.81
SimStudioAI sim 0.6.82
SimStudioAI sim 0.6.83
SimStudioAI sim 0.6.84
SimStudioAI sim 0.6.85
SimStudioAI sim 0.6.86
SimStudioAI sim 0.6.87
SimStudioAI sim 0.6.88
SimStudioAI sim 0.6.89
SimStudioAI sim 0.6.90
SimStudioAI sim 0.6.91
SimStudioAI sim 0.6.92

CWE Classification

CWE-328 CWE-327

References

{
    "lastseen": "",
    "description": "A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.",
    "published": "2026-06-28T22:15:11.256Z",
    "modified": "2026-06-28T22:15:11.256Z",
    "type": "cve",
    "title": "SimStudioAI sim Password Protection deployment.ts weak hash",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/374518\nhttps://vuldb.com/vuln/374518/cti\nhttps://vuldb.com/cve/CVE-2026-13510\nhttps://vuldb.com/submit/838842\nhttps://github.com/simstudioai/sim/issues/4759\nhttps://github.com/simstudioai/sim/pull/4760\nhttps://github.com/simstudioai/sim/",
    "id": "CVE-2026-13510",
    "bulletinFamily": "",
    "cwe": [
        "CWE-328",
        "CWE-327"
    ],
    "cvelist": null,
    "sourceData": "SimStudioAI sim 0.6.0\nSimStudioAI sim 0.6.1\nSimStudioAI sim 0.6.2\nSimStudioAI sim 0.6.3\nSimStudioAI sim 0.6.4\nSimStudioAI sim 0.6.5\nSimStudioAI sim 0.6.6\nSimStudioAI sim 0.6.7\nSimStudioAI sim 0.6.8\nSimStudioAI sim 0.6.9\nSimStudioAI sim 0.6.10\nSimStudioAI sim 0.6.11\nSimStudioAI sim 0.6.12\nSimStudioAI sim 0.6.13\nSimStudioAI sim 0.6.14\nSimStudioAI sim 0.6.15\nSimStudioAI sim 0.6.16\nSimStudioAI sim 0.6.17\nSimStudioAI sim 0.6.18\nSimStudioAI sim 0.6.19\nSimStudioAI sim 0.6.20\nSimStudioAI sim 0.6.21\nSimStudioAI sim 0.6.22\nSimStudioAI sim 0.6.23\nSimStudioAI sim 0.6.24\nSimStudioAI sim 0.6.25\nSimStudioAI sim 0.6.26\nSimStudioAI sim 0.6.27\nSimStudioAI sim 0.6.28\nSimStudioAI sim 0.6.29\nSimStudioAI sim 0.6.30\nSimStudioAI sim 0.6.31\nSimStudioAI sim 0.6.32\nSimStudioAI sim 0.6.33\nSimStudioAI sim 0.6.34\nSimStudioAI sim 0.6.35\nSimStudioAI sim 0.6.36\nSimStudioAI sim 0.6.37\nSimStudioAI sim 0.6.38\nSimStudioAI sim 0.6.39\nSimStudioAI sim 0.6.40\nSimStudioAI sim 0.6.41\nSimStudioAI sim 0.6.42\nSimStudioAI sim 0.6.43\nSimStudioAI sim 0.6.44\nSimStudioAI sim 0.6.45\nSimStudioAI sim 0.6.46\nSimStudioAI sim 0.6.47\nSimStudioAI sim 0.6.48\nSimStudioAI sim 0.6.49\nSimStudioAI sim 0.6.50\nSimStudioAI sim 0.6.51\nSimStudioAI sim 0.6.52\nSimStudioAI sim 0.6.53\nSimStudioAI sim 0.6.54\nSimStudioAI sim 0.6.55\nSimStudioAI sim 0.6.56\nSimStudioAI sim 0.6.57\nSimStudioAI sim 0.6.58\nSimStudioAI sim 0.6.59\nSimStudioAI sim 0.6.60\nSimStudioAI sim 0.6.61\nSimStudioAI sim 0.6.62\nSimStudioAI sim 0.6.63\nSimStudioAI sim 0.6.64\nSimStudioAI sim 0.6.65\nSimStudioAI sim 0.6.66\nSimStudioAI sim 0.6.67\nSimStudioAI sim 0.6.68\nSimStudioAI sim 0.6.69\nSimStudioAI sim 0.6.70\nSimStudioAI sim 0.6.71\nSimStudioAI sim 0.6.72\nSimStudioAI sim 0.6.73\nSimStudioAI sim 0.6.74\nSimStudioAI sim 0.6.75\nSimStudioAI sim 0.6.76\nSimStudioAI sim 0.6.77\nSimStudioAI sim 0.6.78\nSimStudioAI sim 0.6.79\nSimStudioAI sim 0.6.80\nSimStudioAI sim 0.6.81\nSimStudioAI sim 0.6.82\nSimStudioAI sim 0.6.83\nSimStudioAI sim 0.6.84\nSimStudioAI sim 0.6.85\nSimStudioAI sim 0.6.86\nSimStudioAI sim 0.6.87\nSimStudioAI sim 0.6.88\nSimStudioAI sim 0.6.89\nSimStudioAI sim 0.6.90\nSimStudioAI sim 0.6.91\nSimStudioAI sim 0.6.92",
    "sourceHref": "",
    "cvss": {
        "score": 6.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "sim",
    "version": "0.6.0",
    "vendor": "SimStudioAI",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}