CyberPersons CyberPanel

What it is

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vendor notices and references

• cyberpanel.net/KnowledgeBase/home/change-logs/
• nvd.nist.gov/vuln/detail/CVE-2024-51378

Description and required action as published by CISA. Full record at NVD.