CVE-2025-54424 - CVE House

Back to Database

Status published High CVE-2025-54424

1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

8.1 CVSS

Vulnerability Description

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54424

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from 1Panel-dev

View All →

1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

1Panel – CAPTCHA Bypass via Client-Controlled Flag

MaxKB has a Python sandbox LD_PRELOAD bypass

MaxKB vulnerable to privilege escalation through sandbox bypass

MaxKB has Information Leak in sandbox

Affected Vendor

1Panel-dev

View all reports →

Affected Software

1Panel

Vulnerable Versions:

< 2.0.6

Timeline

Official Publish: August 1st, 2025

Last Modified: August 4th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1105 Ingress Tool Transfer

Command and Control