Junglewise Threat Intelligence

CVE-2025-30206: GO-2025-3612 - Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

CVE-2025-30206 · Severity: low · CVSS 3.1 · Published 2025-04-22

Technologies: github.com/donknap/dpanel (Go). Vendors: Go.

Executive brief

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Affected products

Go github.com/donknap/dpanel

Related threats

GO-2026-4318 - DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface in github.com/donknap/dpanel
GO-2025-3909 - Dpanel has an arbitrary file read vulnerability in github.com/donknap/dpanel