Skip to content
OpenAdvisories

Product · 1Panel-dev

KubePi

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-65956

    KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

    KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management opera…

    1Panel-dev KubePi
  • Critical 9.1
    CVE-2023-37917

    Privilege Escalation in kubepi

    KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been …

    1Panel-dev KubePi github.com/KubeOperator/kubepi Go