Go/github.com/tnborg/panel CVE-2025-53534: high 7.7, EPSS 0.69%
RatPanel can perform remote command execution without authorization
Action: Upgrade github.com/tnborg/panel to 0.0.0-20250707071915-4985eb2e1f38 or later.
go get github.com/tnborg/panel@v2.5.6go get github.com/tnborg/panel@v0.0.0-20250707071915-4985eb2e1f38Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.19 | 2.5.6 | - |
| 0.0.0-20241111062800-91ecd04c2700 | 0.0.0-20250707071915-4985eb2e1f38 | - |
Fixed versions
| 2.5.6 | 0.0.0-20250707071915-4985eb2e1f38 |
Sources
- osv: GHSA-fm3m-jrgm-5ppg
- nvd: CVE-2025-53534
- https://github.com/tnborg/panel/security/advisories/GHSA-fm3m-jrgm-5ppg
- https://github.com/tnborg/panel/commit/4985eb2e1f388ecd6faf331941c13cb97368ec1d
- https://github.com/tnborg/panel/commit/91ecd04c270061429f9df5ec19cd6b96a9f595f2
- https://github.com/tnborg/panel/commit/ed5c74c7534230ba685273504af4c1e1e3598ff1
- https://github.com/tnborg/panel
- https://github.com/tnborg/panel/releases/tag/v2.5.6
CVE-2025-53534 · published · modified · JSON