CVE-2025-66507

CSRF vulnerability in 1Panel versions 1.10.33 through 2.0.15 in the panel name management functionality. Lack of CSRF defenses (tokens, Origin/Referer validation) allows an attacker to change the victim's panel name without consent via a crafted webpage.

CSRF vulnerability in 1Panel versions 1.10.33 to 2.0.15 in the web port configuration functionality. The port-change endpoint lacks CSRF defenses (tokens, Origin/Referer validation), allowing an attacker to change the listening port, causing loss of access on the original port and potentially exposing the service on an attacker-chosen port.

1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality. The endpoint lacks CSRF protections like anti-CSRF tokens or Origin/Referer validation, allowing an attacker to change the victim's username without consent.

1Panel versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies (TrustedProxies = 0.0.0.0/0), allowing any client to spoof the X-Forwarded-For header. This enables bypassing all IP-based access controls such as AllowIPs, API whitelists, and localhost-only checks.

In version 1.4.3 of the 1Panel, there is an arbitrary file write vulnerability that could lead to direct control of the server. The issue arises from a lack of parameter filtering in the `SaveContent` function in the `api/v1/file.go` file.

In version 1.4.3 of the 1Panel, authenticated attackers can download arbitrary files through the API interface, leading to unauthorized access. This may result in significant information leakage.

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, there is a vulnerability that allows an attacker to read arbitrary important configuration files on the server due to unfiltered request parameters.

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker could craft malicious payloads to achieve command injection when entering the container terminal.

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories.