Skip to content
OpenAdvisories

Vendor

1Panel-dev

86 known vulnerabilities.

Products

MaxKB 47 CordysCRM 18 1Panel 16 KubePi 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-77521 Public exploit

    MaxKB: Prompt-injectable agent can lead to command execution

    MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or sub-application use SandboxShellBackend, which exposes an execute shell tool without excluding it and omits execute from interrupt_on…

    1Panel-dev MaxKB
  • High 8.1
    CVE-2025-54424 Public exploit

    1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

    1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate ve…

    1Panel-dev 1Panel github.com/1Panel-dev/1Panel/core Go