CVE-2025-56413

The open-source Linux server management panel 1panel version 2.0.8 is vulnerable to an OS Command injection in the OperateSSH function. Attackers can exploit this by manipulating the operation parameter of the /api/v2/hosts/ssh/operate API endpoint to execute arbitrary commands. As a temporary wo...