Fix security issue: Hard-coded Superuser Credential Fallback Vulnerability (CWE-798)

cognee/modules/users/methods/create_default_user.py

@@ -4,8 +4,15 @@ from cognee.base_config import get_base_config
 
 async def create_default_user():
     base_config = get_base_config()
-    default_user_email = base_config.default_user_email or "default_user@example.com"
-    default_user_password = base_config.default_user_password or "default_password"
+    default_user_email = base_config.default_user_email
+    default_user_password = base_config.default_user_password
+
+    if not default_user_email or not default_user_password:
+        raise RuntimeError(
+            "Default superuser creation failed: "
+            "Missing default_user_email and/or default_user_password configuration. "
+            "These must be explicitly set to create the initial superuser."
+        )
 
     user = await create_user(
         email=default_user_email,
@@ -16,4 +23,4 @@ async def create_default_user():
         auto_login=True,
     )
 
-    return user
+    return user