My money is on the author had not updated their docker image version/tag in over 2 years.
It looks like the app used weak hard-coded admin credentials back then. Appears to have been fixed in 2023.
It looks like the app used weak hard-coded admin credentials back then. Appears to have been fixed in 2023.
> Wed Jul 02nd 2025 - qBittorrent v5.1.2 release
> [...]
> qBittorrent v5.1.2 was released.
> SECURITY: It contains security fixes for the WebAPI, Rss and Search modules.