Description
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1Panel-dev | 1Panel | < 2.0.6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | govulncheck-vulndb | 0.0.20250814T182633-150000.1.98.1 | SUSE-SU-2025:02912-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250811T192933-1.1 | openSUSE-SU-2025:15434-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20250814T182633-150000.1.98.1 | SUSE-SU-2025:02912-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
Mr-xn/CVE-2025-54424 ★ 58 · Aug 4, 2025
CVE-2025-54424：1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)
-
hophtien/CVE-2025-54424 ★ 3 · Aug 14, 2025
CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐
-
anonnymous5/1Panel-CVE-2025-54424- ★ 0 · Dec 27, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/1Panel-dev/1Panel/core | >= 1.0.0, < 2.0.6 | 2.0.6 | GHSA-8j63-96wh-wh3j |
| Go | github.com/1Panel-dev/1Panel/core | < 0.0.0-20250730021757-04b9cbd87a15 | 0.0.0-20250730021757-04b9cbd87a15 | GHSA-8j63-96wh-wh3j |
| Go | github.com/1Panel-dev/1Panel/core | all versions | — | GO-2025-3834 |
Advisories 2
- openSUSE-SU-2025:15434-1 govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02912-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Mar 23, 2026