From 71261f028cdad566b63cd26e917b4c97e7c65df3 Mon Sep 17 00:00:00 2001 From: TheSpad Date: Wed, 22 Nov 2023 14:14:54 +0000 Subject: [PATCH] Publish qbittorrent advisory --- content/issues/2023-11-22-qbittorrent.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 content/issues/2023-11-22-qbittorrent.md diff --git a/content/issues/2023-11-22-qbittorrent.md b/content/issues/2023-11-22-qbittorrent.md new file mode 100644 index 000000000..3b2e47742 --- /dev/null +++ b/content/issues/2023-11-22-qbittorrent.md @@ -0,0 +1,17 @@ +--- +title: 'Known Issue: qBittorrent 4.6.1 Web UI Password' +date: '2023-11-22 18:00:00Z' +severity: notice +resolved: false +affected: + - 'Known Issues' + - 'qbittorrent' +section: 'issue' +--- +There is a known issue with qBittorrent 4.6.1, due to an [upstream change](https://www.qbittorrent.org/news#mon-nov-20th-2023---qbittorrent-v4.6.1-release) which changes the Web UI password to a random value on startup if you have not changed it from the default. This change has been made for security reasons due to hackers exploiting users who have exposed their instances to the internet with default credentials. + +Due to an [upstream bug](https://github.com/qbittorrent/qBittorrent/issues/19984) the generated password is not printed to the container logs, making it impossible to log in. + +### Workaround + +As a workaround until a fix can be released, start the container with the `:version-4.6.0-r0` image tag, login to the Web UI using the old default credentials, and change the admin account password. You will then be able to switch back to the `:version-4.6.1-r0` or `:latest` tags.