Information Exposure in OpenPanel by OpenPanel-dev

CVE-2026-116814

What is CVE-2026-116814?

OpenPanel versions prior to 3.0.0 are susceptible to an information exposure vulnerability where sensitive data, such as database connection URLs and email template information, is being logged to the standard output logs. This allows users with access to these logs to retrieve critical information, including database credentials during migration startup and password-reset tokens if certain configurations, like SMTP_HOST and RESEND_API_KEY, are not set.

References