PT-2025-31703 · 1Panel · 1Panel

Lizicoco · Published 2025-08-01 · Updated 2025-08-26 · CVE-2025-54424

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1Panel versions 2.0.5 and below

Description 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. The HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. This can result in Remote Code Execution (RCE) due to the presence of numerous command execution or high-privilege interfaces within 1Panel.

Recommendations Update to version 2.0.6 or later.

Exploit

Fix

RCE

Improper Certificate Validation

Command Injection

Weakness Enumeration

CWE-295

CWE-77

Related Identifiers

CVE-2025-54424

GHSA-8J63-96WH-WH3J

GO-2025-3834

OPENSUSE-SU-2025:15434-1

SUSE-SU-2025:02912-1

Affected Products

1Panel

References · 50

• 🔥 https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3j · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54424.json · Exploit
• https://github.com/1Panel-dev/1Panel/pull/9698/commits/4003284521f8d31ddaf7215d1c30ab8b4cdb0261 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54424 · Security Note
• https://osv.dev/vulnerability/GHSA-8j63-96wh-wh3j · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54424 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3834 · Vendor Advisory
• https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.6 · Note
• https://github.com/1Panel-dev/1Panel · Note
• https://suse.com/security/cve/CVE-2025-5999 · Note
• https://suse.com/security/cve/CVE-2025-54998 · Note
• https://suse.com/security/cve/CVE-2025-6000 · Note
• https://suse.com/security/cve/CVE-2025-54999 · Note