Missing Authentication in OpenPanel Allows Unauthenticated Access to Bull Board Dashboard

CVE-2026-116817

What is CVE-2026-116817?

OpenPanel prior to version 3.0.0 exposes a missing authentication vulnerability, allowing unauthorized users to access the Bull Board dashboard through the worker HTTP port. This vulnerability enables attackers to interact with the system's APIs, potentially allowing them to query job queues, modify job states (such as adding, retrying, or cleaning jobs), and access critical data regarding queue metrics and datastore health. Organizations using affected versions should implement updates to mitigate this risk and enhance their security posture.

References