Openpanel

OpenPanel js-runtime Sandbox Escape via Webhook Template Validator
CVE-2026-93985 9.4 - Critical - September 19, 2026

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to access Function constructor and execute arbitrary code in the worker process.

Code Injection

OpenPanel Tracking API: Client Secret Hash Bypass Enables Revenue Injection
CVE-2026-93984 6.9 - Medium - September 19, 2026

OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptographic hash before authorizing revenue events and bot filtering. Attackers with only a public client ID can supply arbitrary dummy secrets to inject forged revenue metrics and bypass bot detection filters.

authentification

OpenPanel ClickHouse SQL Injection via Unsanitized Property Keys
CVE-2026-93983 5.3 - Medium - September 19, 2026

OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects.

SQL Injection

OpenPanel logs unredacted MCP tokens from query parameters
CVE-2026-93982 4.8 - Medium - September 19, 2026

OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests and access project analytics.

Insertion of Sensitive Information into Log File

OpenPanel Share Lookup Exposes Password Hashes via Access Control Bypass
CVE-2026-88893 8.7 - High - September 10, 2026

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown dimensions for offline password cracking and business intelligence theft.

Information Disclosure

OpenPanel SSRF via Data Importer (all versions)
CVE-2026-88892 5.3 - Medium - September 10, 2026

OpenPanel is an analytics platform. In all versions (no patched release available at time of publication), the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard (apps/api/src/utils/safe-fetch.ts). In packages/importer/src/providers/umami.ts, parseRemoteFile calls fetch() on config.fileUrl, which is validated only by z.string().url(), so values such as http://127.0.0.1:9911/ or http://169.254.169.254/latest/meta-data/ are accepted; the shared createFileImportConfig factory gives the plausible provider the same field. An authenticated organization member including a default 'member' with no project_access rows, for whom the intended access-level check is skipped because getProjectAccess returns boolean true rather than a level object can therefore make the server connect to any address reachable from it. The resulting HTTP status and status text are persisted as Import.errorMessage and returned by import.get to the same user, providing a scanning oracle for internal hosts, ports and paths; if an internal response parses as Umami CSV, its rows are ingested as events and become readable in the attacker's analytics views.

SSRF

OpenPanel Erroneous Read-Only Enforcement Enables Delete & Publish
CVE-2026-88891 7.2 - High - September 10, 2026

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private analytics to public share links, and modify alerting rules by exploiting missing access level validation in mutation resolvers.

Improper Privilege Management

OpenPanel SQLi in Analytics Filter Builder via ClickHouse Injection
CVE-2026-88890 8.4 - High - September 10, 2026

OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile.* filter column identifiers before interpolating them into ClickHouse WHERE clauses. An authenticated attacker with project-scoped read or root export credentials can inject arbitrary ClickHouse SQL to bypass project isolation and read other organizations' analytics data and profile PII via blind boolean oracle techniques.

SQL Injection

Openpanel <2.3.0: IDOR in report.getLayouts & resetLayout
CVE-2026-85615 5.3 - Medium - September 04, 2026

Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to the authorized projectId. Authenticated attackers can supply an arbitrary victim dashboardId with their own projectId to read report layouts and configurations or delete dashboard grid arrangements across tenants.

Insecure Direct Object Reference / IDOR

OpenPanel <2.3.0 SSRF via /tools/site-checker (GET)
CVE-2026-85614 9.2 - Critical - September 04, 2026

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL parameter with no private IP filtering or DNS-rebinding protection. Attackers can make the OpenPanel server issue requests to internal services, localhost, and cloud metadata endpoints, reading internal HTTP response titles, headers, status codes, and SSL certificate information.

SSRF

OpenPanel <2.3.0 XSS via favicon proxy GET /misc/favicon using SVG
CVE-2026-85613 8.4 - High - September 04, 2026

OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint GET /misc/favicon that allows remote attackers to execute scripts by supplying an SVG file URL. Attackers can host malicious SVG files with embedded scripts that execute in the victim's browser on the API origin, enabling same-origin credentialed requests to authenticated endpoints.

XSS

OpenPanel SSRF via favicon/og endpoints before 2.3.0
CVE-2026-85612 8.7 - High - September 04, 2026

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parameter with insufficient validation. Attackers can force the API to fetch arbitrary internal hosts and cloud metadata endpoints, with small responses returned verbatim enabling credential theft and internal service enumeration.

SSRF

OpenPanel <2.3.0 Cross-Tenant OLA in report.getLayouts/resetLayout
CVE-2026-85611 5.3 - Medium - September 04, 2026

OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to scope dashboard queries to the caller's project. Authenticated attackers can supply their own projectId with a victim organization's guessable dashboardId to read confidential report definitions or permanently delete dashboard layouts across tenant boundaries.

Insecure Direct Object Reference / IDOR

OpenPanel <2.3.0: Auth Read Access Enables JS Code Exec via MathJS Matrix
CVE-2026-85610 8.7 - High - September 04, 2026

OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the native JavaScript Function constructor through mathjs matrix objects. Attackers can use the recovered constructor to load Node.js built-ins and execute operating system commands with the privileges of the API process, bypassing organization authorization boundaries.

Code Injection

Openpanel <2.3.0 Unauth SSRF via /tools/site-checker GET
CVE-2026-85609 6.9 - Medium - September 04, 2026

Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in the GET /tools/site-checker endpoint (apps/api/src/controllers/tools.controller.ts). The endpoint passes a user-supplied url query parameter to fetchWithRedirects() and performs server-side HTTP requests to arbitrary URLs without any SSRF/IP validation. An unauthenticated remote attacker can access cloud instance metadata endpoints, probe internal services, scan internal network ports, and read returned content (status code, page size, timing, and parsed HTML metadata), and leak internal IP addresses (via getIPInfo() to a third party).

SSRF

Open Panel 0.3.4 Escalates Privileges via Fix Permissions Function
CVE-2025-25872 - March 14, 2025

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

Open Panel 0.3.4 Remote Priv Esc Via Fix Perms
CVE-2025-25871 - March 14, 2025

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

OpenPanel v0.3.4 Command Injection via Timezone Param
CVE-2024-53584 - January 31, 2025

OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.

OpenPanel v0.3.4 FileMgr DirTraversal via crafted HTTP request
CVE-2024-53582 - January 31, 2025

An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request.