1Panel-dev KubePi vulnerabilities

Latest 1Panel-dev KubePi CVEs

Newest publication first

1. CVE-2026-65956 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

   Published 2026-08-26

   Critical·CVSS 10.0 EPSS 0.64%

   KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached...

2. CVE-2026-69129 KubePi: Insufficient per-cluster authorization checks in cluster management APIs

   Published 2026-08-26

   Medium·CVSS 5.8 EPSS 0.41%

   KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outside the scope they were...

3. CVE-2024-36111 KubePi's JWT token validation has a defect

   Published 2024-07-25

   Medium·CVSS 6.3 EPSS 8.4%

   KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration...

4. CVE-2023-37916 Leak password hash of any user

   Published 2023-07-21

   High·CVSS 7.5 EPSS 0.81%

   KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in v...

5. CVE-2023-37917 Privilege Escalation in kubepi

   Published 2023-07-21

   High·CVSS 8.8 EPSS 0.74%

   KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.