VDB
GO-2025-4207
GO-2025-4207
PUBLISHED
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers in github.com/1Panel-dev/1Panel
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | 1Panel-dev/1Panel/agent | 0, 0 |
| github.com | 1Panel-dev/1Panel | 0, 0 |
Timeline
- Dec 15, 2025 CVE Published
- Mar 3, 2026 CVE Updated
- May 1, 2026 Security Advisory