CVE-2025-56413

An OS Command injection vulnerability exists in the OperateSSH function of 1panel version 2.0.8 . Attackers can execute arbitrary commands by manipulating the operation parameter via the /api/v2/hosts/ssh/operate API endpoint. As a temporary workaround, it is recommended to restrict access to thi...