CVE-2026-79316

An improper access control vulnerability in x-ui 0.3.2 allows any authenticated panel user to modify the xray configuration template through the settings interface and trigger a panel restart. This causes the xray management gRPC service , which is bound to loopback by default, to be regenerated ...