In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
{ "nvd_published_at": "2024-01-09T09:15:42Z", "cwe_ids": [ "CWE-798" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-12T23:19:29Z" }