dpanel vulnerabilities

2 known vulnerabilities in dpanel from Donknap. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  dpanel: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-66292Jan 15, 2026Donknap

  DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/delete interface. Authenticated users can delete arbitrary files on the server via path traversal. Whe

• 9.8 Critical severity

  dpanel: Use of Hard-coded Cryptographic Key

  CVE-2025-30206Apr 15, 2025Donknap

  Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine.