Privilege Escalation Vulnerability in Open Panel by Open Panel
CVE-2025-25871

8HIGH

Key Information:

Vendor
Open Panel
Status
Open Panel
Vendor
CVE Published:
14 March 2025

Summary

A vulnerability exists in Open Panel version 0.3.4 that allows remote attackers to escalate privileges through the Fix Permissions function. This security flaw can be exploited by authenticated users to gain unauthorized access and control over higher-level functions within the application. It is essential for users to update to the latest version to mitigate risks associated with this vulnerability.

References

https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-sec...
https://packetstorm.news/files/id/189621

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.