CyberPanel Flaws Chain Authentication Bypass and Stored XSS Into Remote Code Execution
Brief
A newly disclosed chain of pre-authentication remote code execution vulnerabilities in CyberPanel could enable unauthenticated attackers to compromise exposed servers.
The attack, named ShadowPanel by Pentera researcher Nir Chako, combines weaknesses in the platform’s AI Scanner componen t with its built-in cron-job functionality to move from unauthenticated access to host-level command execution.
CyberPanel is a web hosting control panel for managing websites, DNS configurations, email accounts, databases, users, and scheduled tasks.
CyberPanel Flaws Chain Authentication Bypass
A successful compromise is therefore especially significant because the software operates as an administrative layer over services hosted on a server.
An attacker with control-panel privileges can potentially alter websites, create user accounts, access databases, and establish persistent access.