Product by 1Panel-dev

    1Panel-dev KubePi

    5 known vulnerabilities in 1Panel-dev KubePi (1Panel-dev), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in 1Panel-dev KubePi (1Panel-dev)
    MediumCVE-2024-36111

    KubePi's JWT token validation has a defect

    6.3
    CriticalCVE-2026-65956

    KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

    —
    CriticalCVE-2023-37917

    Privilege Escalation in kubepi

    also in 2 other products

    9.1
    MediumCVE-2026-69129

    KubePi: Insufficient per-cluster authorization checks in cluster management APIs

    —
    HighCVE-2023-37916

    Leak password hash of any user

    also in 2 other products

    6.5

    All products by 1Panel-dev