Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the authusers plugin authentication method, an authenticated user could install a custom package even if this user is not a superuser. Remediation Upgrade ajenti-panel to version 2.2.15 or higher. References -...

CVE-2026-35175: Missing Authorization

Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user using the authusers plugin authentication method could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15...