1Panel Unauthorized access in Backend
Priority MEDIUM 62CWE-863Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-863.
Summary
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00441 38th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed github.com/1Panel-dev/1Panel (Go): 1.5.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| 1Panel-dev | 1Panel | = 1.4.3 | — | No fix listed | CNA |
| — | github.com/1Panel-dev/1Panel (Go) | 1.4.3 to before 1.5.0 | 1.5.0 | Patch available | GHSA-85cf-gj29-f555 |
- 1Panel Vendor1Panel-dev Affected = 1.4.3 Fixed in — No fix listed CNA
- github.com/1Panel-dev/1Panel (Go) Vendor— Affected 1.4.3 to before 1.5.0 Fixed in 1.5.0 Patch available GHSA-85cf-gj29-f555
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fit2cloud:1panel:1.4.3:*:*:*:*:*:*:* | 1.4.3 | Vulnerable | 1Panel-dev |
- cpe:2.3:a:fit2cloud:1panel:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·1Panel-dev
Remediation
- Fix · GHSA-85cf-gj29-f555 github.com/1Panel-dev/1Panel (Go) Fixed in 1.5.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2023-39965
- 2026-10-03 Alias added: GHSA-85cf-gj29-f555
References
More 1Panel-dev 1panel vulnerabilities
- TI-2024-26801 a sqlinjection in 1Panel CVSS 3.1CRITICAL 9.8
- TI-2023-20859 1Panel arbitrary file write vulnerability exists in the background CVSS 3.1CRITICAL 9.8
- TI-2025-34229 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution CVSS 3.1CRITICAL 9.8
- TI-2024-02187 1Panel swap baseApi.UpdateDeviceSwap command injection CVSS 3.1CRITICAL 9.8
- TI-2025-35333 OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing… CVSS 3.1HIGH 8.8
- TI-2023-19085 Command injection in firewall ip functionality in 1Panel CVSS 3.1HIGH 8.8
Sources
- CVE-2023-39965 · CVE Program
- CVE-2023-39965 · NVD
- FIRST EPSS
- GHSA-85cf-gj29-f555 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences