CVE-2025-54424
published 2025-08-01CVE-2025-54424: 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the…
PriorityP265critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.86%
54.0th percentile
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| 1panel-dev | 1panel | < 2.0.6 | 2.0.6 |
| fit2cloud | 1panel | < 2.0.6 | 2.0.6 |
| github.com | 1panel-dev_1panel_core | >= 0 < 0.0.0-20250730021757-04b9cbd87a15 | 0.0.0-20250730021757-04b9cbd87a15 |
| github.com | 1panel-dev_1panel_core | >= 1.0.0 < 2.0.6 | 2.0.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core
osv·2025-08-11
CVE-2025-54424 1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core
1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core
1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core.
NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)
The additional affected modules and versions are: github.com/1Panel-dev/1Panel/core before v0.0.0-20250730021757-04b9cbd87a15, from v1.0.0 before v2.0.6.
OSV
1Panel agent certificate verification bypass leading to arbitrary command execution
osv·2025-08-01
CVE-2025-54424 [HIGH] 1Panel agent certificate verification bypass leading to arbitrary command execution
1Panel agent certificate verification bypass leading to arbitrary command execution
### Project Address: Project Address [1Panel](https://github.com/1Panel-dev/1Panel)
### Official website: https://www.1panel.cn/
### Time: 2025 07 26
### Version: 1panel V2.0.5
### Vulnerability Summary
- First, we introduce the concepts of 1panel v2 Core and Agent. After the new version is released, 1panel adds the node management function, which allows you to control other hosts by adding nodes.
- The HTTPS protocol used for communication between the Core and Agent sides did not fully verify the authenticity of the certificate during certificate verification, resulting in unauthorized interfaces. The presence of a large number of command execution or high-privilege interfaces in the 1panel led to RCE.
GHSA
1Panel agent certificate verification bypass leading to arbitrary command execution
ghsa·2025-08-01
CVE-2025-54424 [HIGH] CWE-295 1Panel agent certificate verification bypass leading to arbitrary command execution
1Panel agent certificate verification bypass leading to arbitrary command execution
### Project Address: Project Address [1Panel](https://github.com/1Panel-dev/1Panel)
### Official website: https://www.1panel.cn/
### Time: 2025 07 26
### Version: 1panel V2.0.5
### Vulnerability Summary
- First, we introduce the concepts of 1panel v2 Core and Agent. After the new version is released, 1panel adds the node management function, which allows you to control other hosts by adding nodes.
- The HTTPS protocol used for communication between the Core and Agent sides did not fully verify the authenticity of the certificate during certificate verification, resulting in unauthorized interfaces. The presence of a large number of command execution or high-privilege interfaces in the 1panel led to RCE.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/1Panel-dev/1Panel/pull/9698/commits/4003284521f8d31ddaf7215d1c30ab8b4cdb0261https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.6https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3jhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3j
2025-08-01
Published