Ethernaut Solutions: 8-Vault

State variables declared “private” are hidden from other contracts but their values are still recorded on the blockchain and so can be read by anyone. See this to learn exactly how:

In this case, simply reading the value of the private state variable “password” will let you unlock the contract by passing it to unlock().