1Panel vulnerabilities

2 known vulnerabilities in 1Panel from LXware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  1Panel: Cross-Site Request Forgery

  CVE-2025-34429Dec 10, 2025LXware

  1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a

• 7.1 High severity

  1Panel: Cross-Site Request Forgery

  CVE-2025-34410Dec 10, 2025LXware

  1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Or