CNNVD-202508-111 Information

CNNVD ID

CNNVD-202508-111

Related CVE

CVE-2025-54424

• CNNVD Published: 2025-08-01

Description (Chinese)

1Panel是中国1Panel社区的一个开源的Linux服务器运维管理面板。 1Panel 2.0.5及之前版本存在命令注入漏洞，该漏洞源于证书验证不完整，可能导致远程代码执行。

Description (English)

1 Panel is an open-source Linux server management panel for a Panel community in China. 1 Panel 2.5 and previous versions had a command-injecting loophole, which stemmed from incomplete certificate certification and could lead to remote code enforcement.

Hazard Level

Medium

Vulnerability Type

命令注入

Affected Vendor

1Panel

Published

2025-08-01

Last Modified

2026-02-24

References

https://github.com/1Panel-dev/1Panel/pull/9698/commits/4003284521f8d31ddaf7215d1c30ab8b4cdb0261 https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.6 https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3j https://access.redhat.com/security/cve/cve-2025-54424 https://nvd.nist.gov/vuln/detail/CVE-2025-54424

Patch

https://github.com/1Panel-dev/1Panel/releases