Executive brief
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers in github.com/1Panel-dev/1Panel
Affected products
- Go github.com/1Panel-dev/1Panel/agent
- Go github.com/1Panel-dev/1Panel
Junglewise Threat Intelligence
CVE-2025-66508: GO-2025-4207 - 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers in github.com/1Panel-dev/1Panel
CVE-2025-66508 · Severity: low · CVSS 3.1 · Published 2025-12-15
Technologies: github.com/1Panel-dev/1Panel (Go). Vendors: Go.
Related threats
- GO-2025-4209 - 1Panel , CAPTCHA Bypass via Client-Controlled Flag in github.com/1Panel-dev/1Panel
- LXware 1Panel CSRF in panel name management
- LXware 1Panel CSRF in web port configuration
- LXware 1Panel CSRF in Change Username functionality
- GO-2023-2006 - 1Panel arbitrary file write vulnerability in github.com/1Panel-dev/1Panel