Skip to content
OpenAdvisories

Package · Go

github.com/1Panel-dev/1Panel/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-66507

    1Panel – CAPTCHA Bypass via Client-Controlled Flag

    1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker to disable CAPTCHA verification by abusing a client-controlled parameter. Because the server previously trusted this val…

    1Panel-dev 1Panel github.com/1Panel-dev/1Panel github.com/1Panel-dev/1Panel/core Go
  • High 8.1
    CVE-2025-54424 Public exploit

    1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

    1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate ve…

    1Panel-dev 1Panel github.com/1Panel-dev/1Panel/core Go