a sqlinjection in 1Panel
Priority HIGH 82CWE-89Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-89.
Summary
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.29183 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed 1Panel (1Panel-dev): 1.10.12-tlsgithub.com/1Panel-dev/1Panel (Go): 1.10.12-tls
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| 1Panel-dev | 1Panel | 1.10.9-tls to before 1.10.12-tls | 1.10.12-tls | Patch available | CNA |
| — | github.com/1Panel-dev/1Panel (Go) | before 1.10.12-tls | 1.10.12-tls | Patch available | GHSA-5grx-v727-qmq6 |
- 1Panel Vendor1Panel-dev Affected 1.10.9-tls to before 1.10.12-tls Fixed in 1.10.12-tls Patch available CNA
- github.com/1Panel-dev/1Panel (Go) Vendor— Affected before 1.10.12-tls Fixed in 1.10.12-tls Patch available GHSA-5grx-v727-qmq6
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:* | 1.10.9-lts to before 1.10.12-lts | Vulnerable | 1Panel-dev |
- cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:* Versions 1.10.9-lts to before 1.10.12-lts Vulnerable ·1Panel-dev
Remediation
- Fix · CNA 1Panel (1Panel-dev) Fixed in 1.10.12-tls
- Fix · GHSA-5grx-v727-qmq6 github.com/1Panel-dev/1Panel (Go) Fixed in 1.10.12-tls Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2024-39907
- 2026-10-03 Alias added: GHSA-5grx-v727-qmq6
References
More 1Panel-dev 1panel vulnerabilities
- TI-2023-20859 1Panel arbitrary file write vulnerability exists in the background CVSS 3.1CRITICAL 9.8
- TI-2025-34229 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution CVSS 3.1CRITICAL 9.8
- TI-2024-02187 1Panel swap baseApi.UpdateDeviceSwap command injection CVSS 3.1CRITICAL 9.8
- TI-2025-35333 OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing… CVSS 3.1HIGH 8.8
- TI-2023-19085 Command injection in firewall ip functionality in 1Panel CVSS 3.1HIGH 8.8
- TI-2023-20857 1Panel O&M management panel has a background arbitrary file reading vulnerability CVSS 3.1HIGH 7.5
Sources
- CVE-2024-39907 · CVE Program
- CVE-2024-39907 · NVD
- FIRST EPSS
- GHSA-5grx-v727-qmq6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences