# CVE-2024-51567: CyberPanel Incorrect Default Permissions Vulnerability

Source: https://junglewise.ai/threats/cve-2024-51567-cyberpanel-incorrect-default-permissions-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-11-07. Updated: 2026-05-09  
License: CC BY 4.0 with a link back

CVE-2024-51567 · Severity: critical · CVSS 10 · Exploited in the wild · Published 2024-11-07

CyberPanel contains a critical vulnerability in the upgrademysqlstatus component of databases/views.py that allows remote, unauthenticated attackers to execute arbitrary commands as root. The flaw exists because secMiddleware only filters POST requests, allowing attackers to bypass authentication via GET requests and inject shell metacharacters into the statusfile property.

Technologies: [Cyberpersons CyberPanel](https://junglewise.ai/threats/technologies/cyberpanel). Vendors: [Cyberpersons](https://junglewise.ai/threats/vendors/cyberpersons).

## Quick answers

**Is CVE-2024-51567 exploited in the wild?** Yes. CVE-2024-51567 is known to be exploited in the wild, first recorded on 7 November 2024. Treat it as urgent.

**How severe is CVE-2024-51567?** Critical severity, with a CVSS score of 10, published 7 November 2024.

**Which products and versions are affected?** CyberPanel CyberPanel through 2.3.6 and unpatched 2.3.7.

**Is there a fix for CVE-2024-51567?** A patch was published on 2024-10-29: Fix committed in GitHub (5b08cd6) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2024-51567 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2024-51567?** Check whether you run Cyberpersons CyberPanel. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- CyberPanel CyberPanel through 2.3.6 and unpatched 2.3.7

## Timeline

- 2024-10-27: disclosed: Public exploit and code review published by dreyand.rs
- 2024-10-29: patched: Fix committed in GitHub (5b08cd6)
- 2024-10-30: exploited: Observed in the wild by PSAUX ransomware actors
- 2024-11-07: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

## Related threats

- [CyberPanel Incorrect Default Permissions Vulnerability](https://junglewise.ai/threats/cve-2024-51378-cyberpanel-incorrect-default-permissions-vulnerability)