What’s Vulnerable › Products

1Panel-dev KubePi vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your 1Panel-dev KubePi version is affected

Latest 1Panel-dev KubePi vulnerabilities

• CVE-2026-69129 — KubePi: Insufficient per-cluster authorization checks in cluster management APIs (CVSS 5.8)
• CVE-2026-65956 — KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF (CVSS 10.0)
• CVE-2023-37917 — Privilege Escalation in kubepi (CVSS 8.8)
• CVE-2023-37916 — Leak password hash of any user (CVSS 7.5)
• CVE-2023-22478 — KubePi is vulnerable to missing authorization (CVSS 7.5)
• CVE-2023-22479 — KubePi vulnerable to session fixation attack (CVSS 6.5)
• CVE-2023-22463 — KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token (CVSS 9.8)