1panel-dev vulnerabilities
87 CVEs and advisories name 1panel-dev as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-665081Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
- CVE-2025-665071Panel – CAPTCHA Bypass via Client-Controlled Flag
- CVE-2025-64703MaxKB has Information Leak in sandbox
- CVE-2025-64511MaxKB has SSRF in sandbox
- CVE-2025-104331Panel-dev MaxKB debug deserialization
- CVE-2025-544241Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution
- CVE-2025-53928MaxKB has RCE in MCP call
- CVE-2025-53927MaxKB sandbox bypass
- CVE-2025-48950MaxKB Python Sandbox Bypass in Function Library
- CVE-2025-45461Panel-dev MaxKB Knowledge Base Module csv injection
- CVE-2025-32383MaxKB has a reverse shell vulnerability in function library
- CVE-2024-56137MaxKB RCE vulnerability in function library
- CVE-2024-36111KubePi's JWT token validation has a defect
- CVE-2024-399111Panel SQL injection
- CVE-2024-39907a sqlinjection in 1Panel
- CVE-2024-34352Arbitrary file write vulnerability in 1Panel
- CVE-2024-302571Panel's password verification is suspected to have a timing attack vulnerability
- CVE-2024-272881Panel open source panel project has an unauthorized vulnerability.
- CVE-2024-247681Panel set-cookie is missing the Secure keyword
- CVE-2023-399661Panel arbitrary file write vulnerability exists in the background
- CVE-2023-399651Panel Unauthorized access in Backend
- CVE-2023-399641Panel O&M management panel has a background arbitrary file reading vulnerability
- CVE-2023-37916Leak password hash of any user
- CVE-2023-37917Privilege Escalation in kubepi
- CVE-2023-37477Command injection in firewall ip functionality in 1Panel
- CVE-2023-364571Panel vulnerable to command injection when adding container repositories
- CVE-2023-364581Panel vulnerable to ommand injection when entering the container terminal