# CVE-2026-85613: OpenPanel unauthenticated XSS in SVG favicon proxy

Source: https://junglewise.ai/threats/cve-2026-85613-openpanel-unauthenticated-xss-in-svg-favicon-proxy  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-04. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85613 · Severity: high · CVSS 8.2 · Published 2026-09-04

OpenPanel is an open-source hosting control panel that exposes an unauthenticated favicon proxy endpoint. An attacker can host a malicious SVG file and trick users into loading it via the proxy, causing embedded JavaScript to execute in the user's browser with access to authenticated API endpoints. This allows attackers to make unauthorized requests to the dashboard and steal user data or perform actions on behalf of authenticated users.

Technologies: [OpenPanel](https://junglewise.ai/threats/technologies/openpanel). Vendors: [OpenPanel](https://junglewise.ai/threats/vendors/openpanel).

## Quick answers

**Is CVE-2026-85613 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85613 being exploited in the wild.

**How severe is CVE-2026-85613?** High severity, with a CVSS score of 8.2, published 4 September 2026.

**Which products and versions are affected?** OpenPanel before 2.3.0.

**Is there a fix for CVE-2026-85613?** A patch was published on 2026-09-04: Version 2.3.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-85613 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85613?** Check whether you run OpenPanel at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a cross-site scripting (XSS) flaw in the unauthenticated GET /misc/favicon endpoint (apps/api/src/controllers/misc.controller.ts). The endpoint fetches and proxies favicons from attacker-supplied URLs. While non-SVG images are rasterized to PNG via Sharp (neutralizing embedded scripts), SVG files are returned verbatim without sanitization. The response is served inline as Content-Type: image/svg+xml with no Content-Security-Policy or X-Content-Type-Options header, allowing embedded SVG scripts to execute in the victim's browser. Since the API origin serves credentialed endpoints with CORS enabled, an attacker's script can issue same-origin requests to authenticated tRPC endpoints and steal session data or perform unauthorized actions. The attack requires user interaction (visiting a malicious link) but no authentication. The fix is available in version 2.3.0.

## Affected products

- OpenPanel OpenPanel before 2.3.0

## Timeline

- 2026-08-20: disclosed
- 2026-09-04: patched: Version 2.3.0 released

## References

- [https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-r7hx-q6f4-vj6h](https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-r7hx-q6f4-vj6h)
- [https://www.vulncheck.com/advisories/openpanel-unauthenticated-xss-via-svg-favicon-proxy](https://www.vulncheck.com/advisories/openpanel-unauthenticated-xss-via-svg-favicon-proxy)

## Related threats

- [OpenPanel ClickHouse SQL injection](https://junglewise.ai/threats/cve-2026-116818-openpanel-before-3-0-0-contains-an-unauthenticated-clickhouse)
- [OpenPanel missing authentication in Bull Board](https://junglewise.ai/threats/cve-2026-116817-openpanel-before-3-0-0-contains-a-missing-authentication)
- [OpenPanel improper escaping in sankey.service.ts](https://junglewise.ai/threats/cve-2026-116815-openpanel-before-3-0-0-contains-an-improper-escaping)
- [OpenPanel information exposure through logs](https://junglewise.ai/threats/cve-2026-116814-openpanel-before-3-0-0-contains-an-information-exposure)
- [OpenPanel SQL injection in cohort profile filter](https://junglewise.ai/threats/cve-2026-116812-openpanel-before-3-0-0-contains-a-sql-injection-vulnerability-in)