# cve.now: 1panel-dev

The newest entries naming 1panel-dev as an affected vendor (up to 200), of 87 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-126496](https://cve.now/CVE-2026-126496.md): 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id} (CVSS 5.3)
- [CVE-2026-108705](https://cve.now/CVE-2026-108705.md): CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import (CVSS 5.3)
- [CVE-2026-108704](https://cve.now/CVE-2026-108704.md): CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints (CVSS 5.3)
- [CVE-2026-108703](https://cve.now/CVE-2026-108703.md): CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push (CVSS 5.3)
- [CVE-2026-108702](https://cve.now/CVE-2026-108702.md): CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test (CVSS 5.3)
- [CVE-2026-108701](https://cve.now/CVE-2026-108701.md): 1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort (CVSS 5.3)
- [CVE-2026-108700](https://cve.now/CVE-2026-108700.md): 1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title (CVSS 7.1)
- [CVE-2026-108692](https://cve.now/CVE-2026-108692.md): 1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints (CVSS 7.1)
- [CVE-2026-79919](https://cve.now/CVE-2026-79919.md): MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD\_NEXT) (CVSS 6.3)
- [CVE-2026-79918](https://cve.now/CVE-2026-79918.md): MaxKB: Sandbox escape via unhooked fexecve (CVSS 6.3)
- [CVE-2026-77517](https://cve.now/CVE-2026-77517.md): MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base (CVSS 5.4)
- [CVE-2026-77521](https://cve.now/CVE-2026-77521.md): MaxKB: Prompt-injectable agent can lead to command execution (CVSS 10.0)
- [CVE-2026-77522](https://cve.now/CVE-2026-77522.md): MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind) (CVSS 4.3)
- [CVE-2026-79917](https://cve.now/CVE-2026-79917.md): MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation (CVSS 6.5)
- [CVE-2026-77516](https://cve.now/CVE-2026-77516.md): MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path (CVSS 5.4)
- [CVE-2026-77523](https://cve.now/CVE-2026-77523.md): MaxKB: Cross-workspace model parameter form write (CVSS 7.4)
- [CVE-2026-77525](https://cve.now/CVE-2026-77525.md): MaxKB: Management chat-record routes trust path application\_id but load ChatRecord by global chat\_id (CVSS 4.2)
- [CVE-2026-77518](https://cve.now/CVE-2026-77518.md): MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows (CVSS 5.0)
- [CVE-2026-79916](https://cve.now/CVE-2026-79916.md): MaxKB AWS Bedrock model credential injection leads to remote code execution (CVSS 9.1)
- [CVE-2026-77520](https://cve.now/CVE-2026-77520.md): MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application (CVSS 5.4)
- [CVE-2026-77519](https://cve.now/CVE-2026-77519.md): MaxKB: Expired application API keys remain usable on \`/chat/api/mcp\` (CVSS 5.4)
- [CVE-2026-76899](https://cve.now/CVE-2026-76899.md): CordysCRM: Authenticated SQL injection via \`sort.name\` on \`POST /account-pool/page\` (CVSS 5.7)
- [CVE-2026-76902](https://cve.now/CVE-2026-76902.md): CordysCRM: Unauthenticated arbitrary file disclosure via \`/attachment/preview/{id}\` and \`/pic/preview/{id}\` (CVSS 5.0)
- [CVE-2026-76900](https://cve.now/CVE-2026-76900.md): CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at Runtime (CVSS 6.8)
- [CVE-2026-76901](https://cve.now/CVE-2026-76901.md): CordysCRM: Broken object-level authorization in lead pool and account pool detail endpoints exposes arbitrary leads and accounts (CVSS 5.8)
- [CVE-2026-63647](https://cve.now/CVE-2026-63647.md): CordysCRM SSE Notification Stream Hijack via \`/sse/subscribe\` (CVSS 9.3)
- [CVE-2026-63646](https://cve.now/CVE-2026-63646.md): CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users (CVSS 6.9)
- [CVE-2026-52745](https://cve.now/CVE-2026-52745.md): CordysCRM: Customer Public Pool Sorting Field SQL Injection (CVSS 5.3)
- [CVE-2026-65956](https://cve.now/CVE-2026-65956.md): KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF (CVSS 10.0)
- [CVE-2026-69129](https://cve.now/CVE-2026-69129.md): KubePi: Insufficient per-cluster authorization checks in cluster management APIs (CVSS 5.8)
- [CVE-2026-64870](https://cve.now/CVE-2026-64870.md): MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation (CVSS 5.3)
- [CVE-2026-16223](https://cve.now/CVE-2026-16223.md): 1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery (CVSS 5.3)
- [CVE-2026-16222](https://cve.now/CVE-2026-16222.md): 1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery (CVSS 5.3)
- [CVE-2026-54149](https://cve.now/CVE-2026-54149.md): MaxKB MCP tool import validation bypass allows post-authentication remote code execution (CVSS 8.8)
- [CVE-2026-56779](https://cve.now/CVE-2026-56779.md): MaxKB \< 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download\_url Parameters (CVSS 5.3)
- [CVE-2026-10567](https://cve.now/CVE-2026-10567.md): 1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting (CVSS 5.1)
- [CVE-2026-10514](https://cve.now/CVE-2026-10514.md): 1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting (CVSS 4.8)
- [CVE-2026-42336](https://cve.now/CVE-2026-42336.md): MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch (CVSS 5.1)
- [CVE-2026-42337](https://cve.now/CVE-2026-42337.md): MaxKB: Broken Access Control in MaxKB OSS URL Fetch API (CVSS 5.3)
- [CVE-2026-44847](https://cve.now/CVE-2026-44847.md): MaxKB: Webhook Trigger Authentication Bypass (CVSS 7.5)
- [CVE-2026-45412](https://cve.now/CVE-2026-45412.md): MaxKB: Unauthenticated SSRF via Workflow Template Import (CVSS 6.3)
- [CVE-2026-45413](https://cve.now/CVE-2026-45413.md): MaxKB: Unsalted MD5 Password Hashing (CVSS 6.9)
- [CVE-2026-42335](https://cve.now/CVE-2026-42335.md): MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy (CVSS 6.3)
- [CVE-2026-39426](https://cve.now/CVE-2026-39426.md): MaxKB: Stored XSS via Unsanitized iframe\_render Parsing (CVSS 5.1)
- [CVE-2026-39425](https://cve.now/CVE-2026-39425.md): MaxKB: Stored XSS via Unsanitized html\_rander Tags in Markdown Rendering (CVSS 5.1)
- [CVE-2026-39419](https://cve.now/CVE-2026-39419.md): MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing (CVSS 3.1)
- [CVE-2026-39424](https://cve.now/CVE-2026-39424.md): MaxKB has CSV Injection in its Application Chat Export Functionality (CVSS 5.3)
- [CVE-2026-39423](https://cve.now/CVE-2026-39423.md): Stored XSS via Eval Injection in EchartsRander Component (CVSS 6.9)
- [CVE-2026-39422](https://cve.now/CVE-2026-39422.md): MaxKB has Stored XSS via ChatHeadersMiddleware (CVSS 6.9)
- [CVE-2026-39421](https://cve.now/CVE-2026-39421.md): MaxKB: Sandbox escape via ctypes and unhooked SYS\_pkey\_mprotect (CVSS 6.3)
- [CVE-2026-39420](https://cve.now/CVE-2026-39420.md): MaxKB: Sandbox escape via LD\_PRELOAD bypass (CVSS 6.3)
- [CVE-2026-39418](https://cve.now/CVE-2026-39418.md): MaxKB: SSRF via sandbox network hook bypass (CVSS 5.0)
- [CVE-2026-39417](https://cve.now/CVE-2026-39417.md): MaxKB: RCE via MCP stdio command injection in workflow engine (CVSS 4.6)
- [CVE-2025-15632](https://cve.now/CVE-2025-15632.md): 1Panel-dev MaxKB MdPreview chat.ts cross site scripting (CVSS 5.1)
- [CVE-2026-6108](https://cve.now/CVE-2026-6108.md): 1Panel-dev MaxKB Model Context Protocol Node base\_mcp\_node.py execute os command injection (CVSS 5.3)
- [CVE-2026-6107](https://cve.now/CVE-2026-6107.md): 1Panel-dev MaxKB ChatHeadersMiddleware chat\_headers\_middleware.py cross site scripting (CVSS 5.1)
- [CVE-2026-6106](https://cve.now/CVE-2026-6106.md): 1Panel-dev MaxKB Public Chat static\_headers\_middleware.py StaticHeadersMiddleware cross site scripting (CVSS 5.1)
- [CVE-2026-23525](https://cve.now/CVE-2026-23525.md): 1panel App Store vulnerable to Cross-site Scripting (CVSS 6.4)
- [CVE-2025-66446](https://cve.now/CVE-2025-66446.md): MaxKB has a Python sandbox LD\_PRELOAD bypass (CVSS 8.8)
- [CVE-2025-66419](https://cve.now/CVE-2025-66419.md): MaxKB vulnerable to privilege escalation through sandbox bypass (CVSS 8.8)
- [CVE-2025-66508](https://cve.now/CVE-2025-66508.md): 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers (CVSS 6.5)
- [CVE-2025-66507](https://cve.now/CVE-2025-66507.md): 1Panel – CAPTCHA Bypass via Client-Controlled Flag (CVSS 7.5)
- [CVE-2025-64703](https://cve.now/CVE-2025-64703.md): MaxKB has Information Leak in sandbox (CVSS 6.3)
- [CVE-2025-64511](https://cve.now/CVE-2025-64511.md): MaxKB has SSRF in sandbox (CVSS 7.4)
- [CVE-2025-10433](https://cve.now/CVE-2025-10433.md): 1Panel-dev MaxKB debug deserialization (CVSS 5.3)
- [CVE-2025-54424](https://cve.now/CVE-2025-54424.md): 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution (CVSS 8.1)
- [CVE-2025-53928](https://cve.now/CVE-2025-53928.md): MaxKB has RCE in MCP call (CVSS 4.6)
- [CVE-2025-53927](https://cve.now/CVE-2025-53927.md): MaxKB sandbox bypass (CVSS 4.6)
- [CVE-2025-48950](https://cve.now/CVE-2025-48950.md): MaxKB Python Sandbox Bypass in Function Library (CVSS 5.8)
- [CVE-2025-4546](https://cve.now/CVE-2025-4546.md): 1Panel-dev MaxKB Knowledge Base Module csv injection (CVSS 5.1)
- [CVE-2025-32383](https://cve.now/CVE-2025-32383.md): MaxKB has a reverse shell vulnerability in function library (CVSS 4.3)
- [CVE-2024-56137](https://cve.now/CVE-2024-56137.md): MaxKB RCE vulnerability in function library (CVSS 6.8)
- [CVE-2024-36111](https://cve.now/CVE-2024-36111.md): KubePi's JWT token validation has a defect (CVSS 6.3)
- [CVE-2024-39911](https://cve.now/CVE-2024-39911.md): 1Panel SQL injection (CVSS 10.0)
- [CVE-2024-39907](https://cve.now/CVE-2024-39907.md): a sqlinjection in 1Panel (CVSS 9.8)
- [CVE-2024-34352](https://cve.now/CVE-2024-34352.md): Arbitrary file write vulnerability in 1Panel (CVSS 6.5)
- [CVE-2024-30257](https://cve.now/CVE-2024-30257.md): 1Panel's password verification is suspected to have a timing attack vulnerability (CVSS 3.9)
- [CVE-2024-27288](https://cve.now/CVE-2024-27288.md): 1Panel open source panel project has an unauthorized vulnerability. (CVSS 6.3)
- [CVE-2024-24768](https://cve.now/CVE-2024-24768.md): 1Panel set-cookie is missing the Secure keyword (CVSS 6.5)
- [CVE-2023-39966](https://cve.now/CVE-2023-39966.md): 1Panel arbitrary file write vulnerability exists in the background (CVSS 7.5)
- [CVE-2023-39965](https://cve.now/CVE-2023-39965.md): 1Panel Unauthorized access in Backend (CVSS 6.5)
- [CVE-2023-39964](https://cve.now/CVE-2023-39964.md): 1Panel O&M management panel has a background arbitrary file reading vulnerability (CVSS 7.5)
- [CVE-2023-37916](https://cve.now/CVE-2023-37916.md): Leak password hash of any user (CVSS 6.5)
- [CVE-2023-37917](https://cve.now/CVE-2023-37917.md): Privilege Escalation in kubepi (CVSS 9.1)
- [CVE-2023-37477](https://cve.now/CVE-2023-37477.md): Command injection in firewall ip functionality in 1Panel (CVSS 7.2)
- [CVE-2023-36457](https://cve.now/CVE-2023-36457.md): 1Panel vulnerable to command injection when adding container repositories (CVSS 6.3)
- [CVE-2023-36458](https://cve.now/CVE-2023-36458.md): 1Panel vulnerable to ommand injection when entering the container terminal (CVSS 6.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/1panel-dev
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.