EUVD-2026-110526

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens,...

CVE-2026-116819

Versions of OpenPanel prior to 3.0.0 are vulnerable to an information disclosure vulnerability. The flaw exists because the notification.rules query fails to execute redactIntegration, allowing users with read-level project permissions to access plaintext integration secrets . An attacker can exp...