Skip to content
Sign in
9.8 Critical

CVE-2024-39907 1Panel is a web-based linux server management control panel

Description

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.

Affected products and versions

Product Affected versions Fixed in
1Panel 1.10 1.10.9-tls → < 1.10.12-tls 1.10.12-tls
1panel 1.10 earliest → < 1.10.12-lts 1.10.12-lts

Other CVEs of 1Panel

The 16 CVEs of 1Panel →
CVE-2026-23525 1Panel is an open-source, web-based control panel for Linux server management 6.4 Medium CVE-2025-66508 1Panel is an open-source, web-based control panel for Linux server management 6.5 Medium CVE-2025-66507 1Panel is an open-source, web-based control panel for Linux server management 7.5 High CVE-2025-54424 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server 8.1 High
Track this CVE