Go/github.com/1Panel-dev/1Panel/agent CVE-2025-66508: medium 6.5, EPSS 0.25%
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers in github.com/1Panel-dev/1Panel
Action: Upgrade github.com/1Panel-dev/1Panel/agent to 0.0.0-20251201063338-94f7d78cc976 or later.
go get github.com/1Panel-dev/1Panel/agent@v0.0.0-20251201063338-94f7d78cc976Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20251201063338-94f7d78cc976 |
Sources
- osv: GO-2025-4207#Go/github.com/1Panel-dev/1Panel/agent
- nvd: CVE-2025-66508
- https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765
- https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed
CVE-2025-66508 · published · modified · JSON