Go/github.com/tnb-labs/panel CVE-2025-53534: high 7.7, EPSS 0.69%

RatPanel can perform remote command execution without authorization in github.com/tnborg/panel in github.com/TheTNB/panel

Action: Upgrade github.com/tnb-labs/panel to 0.0.0-20250707071915-4985eb2e1f38 or later.

go get github.com/tnb-labs/panel@v0.0.0-20250707071915-4985eb2e1f38

Affected

Fixed versions

Sources

• osv: GO-2025-3844#Go/github.com/tnb-labs/panel
• nvd: CVE-2025-53534
• https://github.com/tnborg/panel/security/advisories/GHSA-fm3m-jrgm-5ppg
• https://github.com/tnborg/panel/commit/4985eb2e1f388ecd6faf331941c13cb97368ec1d
• https://github.com/tnborg/panel/commit/91ecd04c270061429f9df5ec19cd6b96a9f595f2
• https://github.com/tnborg/panel/commit/ed5c74c7534230ba685273504af4c1e1e3598ff1
• https://github.com/tnborg/panel/releases/tag/v2.5.6

CVE-2025-53534 · published 2025-08-11T17:24:51Z · modified 2026-03-03T04:56:45.696027Z · JSON