Fix security issue: Hardcoded Superuser Default Credentials Risk (CWE-798)

cognee/modules/users/methods/create_default_user.py

@@ -4,8 +4,15 @@ from cognee.base_config import get_base_config
 
 async def create_default_user():
     base_config = get_base_config()
-    default_user_email = base_config.default_user_email or "default_user@example.com"
+    default_user_email = base_config.default_user_email
-    default_user_password = base_config.default_user_password or "default_password"
+    default_user_password = base_config.default_user_password
+
+    if not default_user_email or not default_user_password:
+        raise RuntimeError(
+            "Default user credentials (email and password) must be set in configuration. "
+            "Refusing to create superuser with insecure default credentials. "
+            "Please set 'default_user_email' and 'default_user_password' in base configuration."
+        )
 
     user = await create_user(
         email=default_user_email,
@@ -16,4 +23,4 @@ async def create_default_user():
         auto_login=True,
     )
 
-    return user
+    return user