Pelican vulnerabilities
We track 1 vulnerability in Pelican products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Pelican vulnerabilities
- 8.8 High severity
panel: Missing Authorization
Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than server-side authorization checks. Attackers with startup.read permission can craft Livewire state updates to invoke afterStateUpdated c