CVE-2024-1189 is a Medium severity denial of service, scored 5.3, in the Encryption Passphrase Handler of Softaculous AMPPS 2.7. The record says upgrading to version 4.0 addresses it and notes that 4.0 is a complete overhaul with rewritten code. Move off 2.7 if you still run it.
What's affected
The record lists AMPPS 2.7 as affected. It says upgrading to version 4.0 addresses the issue, and adds the vendor's note that AMPPS 4.0 is a complete overhaul and the code was rewritten. So the fix is a move to a new major version, not a patch release.
The record says the exploit has been disclosed publicly and the attack can be launched remotely. I could not read the VulDB entry, so I cannot add more.
How to check if you're exposed
AMPPS is a local web development stack for Apache, MySQL and PHP. On each machine, open the AMPPS control panel and read the version, or check the install folder. Version 2.7 is the one listed.
Because AMPPS is usually a development tool, also check whether any instance listens on a network interface other than localhost. The remote attack vector only matters if someone else can reach it.
What to do now
- Find machines running AMPPS 2.7.
- Upgrade to AMPPS 4.0 or later, and test your projects, since it is a rewrite.
- Bind development stacks to localhost and keep them off shared or public networks.
- If you cannot move, stop the service when not in use.
- Do not host production sites on a development stack.
Why it matters
The class is uncontrolled resource consumption in the broad sense used for CWE-404, CWE-404, here described as denial of service through the passphrase handler. The effect is that the service stops responding, with no data loss in the record.
For a development tool the practical risk is small, which fits the Medium score of 5.3. The lesson is hygiene: development stacks should not be reachable from outside your machine. The record's KEV flag is false.
Quick check
Is 4.0 a patch or a rewrite?
The record quotes the vendor saying 4.0 is a complete overhaul and the code was rewritten.
Should AMPPS face the internet?
No. It is a development stack. Keep it on localhost.
Sources
Last reviewed: 19 October 2026.
