CVE-2026-116807

OpenPanel versions prior to 3.0.0 are vulnerable to an SQL injection vulnerability within the ClickHouse database. The flaw exists in the event.events tRPC Query , where unescaped profile filter names are injected into a JOIN subquery . Authenticated users can exploit this by supplying a crafted ...