It looks like the app used weak hard-coded admin credentials back then. Appears to have been fixed in 2023.
> Wed Jul 02nd 2025 - qBittorrent v5.1.2 release > [...] > qBittorrent v5.1.2 was released. > SECURITY: It contains security fixes for the WebAPI, Rss and Search modules.