Skip to content
OpenAdvisories

Product · 1Panel-dev

KubePi

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.8
    CVE-2026-69129

    KubePi: Insufficient per-cluster authorization checks in cluster management APIs

    KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outsid…

    1Panel-dev KubePi
  • Medium 6.3
    CVE-2024-36111

    KubePi's JWT token validation has a defect

    KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key…

    1Panel-dev KubePi
  • Medium 6.5
    CVE-2023-37916

    Leak password hash of any user

    KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue ha…

    1Panel-dev KubePi github.com/KubeOperator/kubepi Go