Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Publish qbittorrent advisory #185

Merged
merged 1 commit into from
Nov 22, 2023
Merged

Publish qbittorrent advisory #185

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions content/issues/2023-11-22-qbittorrent.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
---
title: 'Known Issue: qBittorrent 4.6.1 Web UI Password'
date: '2023-11-22 18:00:00Z'
severity: notice
resolved: false
affected:
- 'Known Issues'
- 'qbittorrent'
section: 'issue'
---
There is a known issue with qBittorrent 4.6.1, due to an [upstream change](https://www.qbittorrent.org/news#mon-nov-20th-2023---qbittorrent-v4.6.1-release) which changes the Web UI password to a random value on startup if you have not changed it from the default. This change has been made for security reasons due to hackers exploiting users who have exposed their instances to the internet with default credentials.

Due to an [upstream bug](https://github.com/qbittorrent/qBittorrent/issues/19984) the generated password is not printed to the container logs, making it impossible to log in.

### Workaround

As a workaround until a fix can be released, start the container with the `:version-4.6.0-r0` image tag, login to the Web UI using the old default credentials, and change the admin account password. You will then be able to switch back to the `:version-4.6.1-r0` or `:latest` tags.