Multiple Vulnerabilities Found in OpenPanel Before 3.0.0

www.vulncheck.com

Multiple Vulnerabilities Found in OpenPanel Before 3.0.0

First seen 27 Oct 2026, 06:43 UTC •57.0

Article Content

1 / 5

Browse articles

ThreatCluster •October 27, 2026 at 08:13 UTC

•OpenPanel versions before 3.0.0 have critical SQL injection vulnerabilities.
•Vulnerabilities include unauthenticated access and credential disclosure.
•No active exploitation reported, but immediate patching is recommended.

OpenPanel versions prior to 3.0.0 are affected by multiple vulnerabilities including unauthenticated SQL injection via the /live/visitors WebSocket and profile values, as well as credential disclosure through notification rules queries and remote code execution via webhook JavaScript templates. These vulnerabilities are categorized under CWE-89 for SQL injection. The specific CVEs associated with these vulnerabilities include GHSA-8wr9-x797-f238 and GHSA-4j6c-j6vc-xq96, among others. The vulnerabilities allow attackers to exploit the system without authentication, potentially leading to unauthorized access and data exposure. There is currently no information indicating in the wild, but the vulnerabilities are serious enough to warrant immediate attention from users of OpenPanel. Administrators are advised to prioritize patching to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-27

Vulnerabilities disclosed

Multiple vulnerabilities in OpenPanel before version 3.0.0 were disclosed, including SQL injection and credential exposure.

More articles in this cluster (4)

Threat Graph

7 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Sql Injection
Zero-day Exploit
T1190 - Exploit Public-Facing Application

Weakness (1)

CWE-89 - SQL Injection

Affected Platform (3)

ClickHouse
OpenPanel
WebSocket

Relationships

Sql Injection targets ClickHouse
Sql Injection targets OpenPanel
Sql Injection targets WebSocket
Zero-day Exploit targets ClickHouse
Zero-day Exploit targets OpenPanel
Zero-day Exploit targets WebSocket
T1190 - Exploit Public-Facing Application targets ClickHouse
T1190 - Exploit Public-Facing Application targets OpenPanel
T1190 - Exploit Public-Facing Application targets WebSocket
Sql Injection related to CWE-89 - SQL Injection

Common questions

Which versions of OpenPanel are affected?

All versions of OpenPanel before 3.0.0 are affected by these vulnerabilities.

Is there any active exploitation of these vulnerabilities?

As of now, there are no reports of active exploitation in the wild.

What actions should be taken to mitigate these vulnerabilities?

Administrators should prioritize updating to OpenPanel version 3.0.0 or later to mitigate these vulnerabilities.

Continue Reading

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…

Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…