Skip to content
Sign in
9.1 Critical

CVE-2023-37917 KubePi is an opensource kubernetes management panel

Description

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products and versions

Product Affected versions Fixed in
KubePi 1.6 earliest → < 1.6.5 1.6.5
kubepi 1.6 earliest → < 1.6.5 1.6.5

Other CVEs of KubePi

The 5 CVEs of KubePi →
CVE-2026-65956 KubePi is a Kubernetes multi-cluster management panel 10.0 Critical CVE-2026-69129 KubePi is a Kubernetes multi-cluster management panel 5.8 Medium CVE-2024-36111 KubePi is a K8s panel 6.3 Medium CVE-2023-37916 KubePi is an opensource kubernetes management panel 6.5 Medium
Track this CVE