Exploit for Command Injection in Fit2Cloud 1Panel

CVE-2025-54424 CVE-2025-54424: 1Panel client vulnerability in...

CVE-2025-54424

creationtimestamp| type| source ---|---|--- 2025-08-02 01:13:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lveye43e2s2z 2025-08-04 13:28:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46538 2025-08-04 21:00:05+00:00| published-proof-of-concept|...

CVE-2025-54424

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate...

CVE-2025-54424

1Panel (Go to Mode C): The CVE-2025-54424 vulnerability affects 1Panel versions 2.0.5 and earlier, where TLS certificate verification between Core and Agent endpoints is incomplete, allowing an attacker to bypass client cert validation and access high-privilege interfaces. This leads to remote co...