What’s Vulnerable › Products

IceWhaleTech CasaOS-UserService vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your IceWhaleTech CasaOS-UserService version is affected

Latest IceWhaleTech CasaOS-UserService vulnerabilities

• CVE-2025-34171 — CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure (CVSS 5.3)
• CVE-2024-24767 — CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability (CVSS 9.8)
• CVE-2024-24765 — CasaOS-UserService allows unauthorized access to any file (CVSS 9.8)
• CVE-2023-37469 — CasaOS Command Injection vulnerability (CVSS 8.8)
• CVE-2023-37266 — Weak json web token (JWT) secrets in CasaOS (CVSS 9.8)
• CVE-2023-37265 — Incorrect identification of source IP addresses in CasaOS (CVSS 9.8)
• CVE-2022-24193 — (CVSS 9.8)