agentprime: openpanelEvery new CVE for openpanel.https://agentprime.io/CVE-2026-116819: OpenPanel before 3.0.0 Credential Disclosure via notification.rules Queryhttps://agentprime.io/advisories/CVE-2026-116819/https://agentprime.io/advisories/CVE-2026-116819/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:46 GMTCVECVE-2026-116818: OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSockethttps://agentprime.io/advisories/CVE-2026-116818/https://agentprime.io/advisories/CVE-2026-116818/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:45 GMTCVECVE-2026-116817: OpenPanel before 3.0.0 Missing Authentication on Worker Bull Boardhttps://agentprime.io/advisories/CVE-2026-116817/https://agentprime.io/advisories/CVE-2026-116817/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:44 GMTCVECVE-2026-116815: OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.tshttps://agentprime.io/advisories/CVE-2026-116815/https://agentprime.io/advisories/CVE-2026-116815/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:44 GMTCVECVE-2026-116814: OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logshttps://agentprime.io/advisories/CVE-2026-116814/https://agentprime.io/advisories/CVE-2026-116814/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:43 GMTCVECVE-2026-116813: OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tshttps://agentprime.io/advisories/CVE-2026-116813/https://agentprime.io/advisories/CVE-2026-116813/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:41 GMTCVECVE-2026-116812: OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filterhttps://agentprime.io/advisories/CVE-2026-116812/https://agentprime.io/advisories/CVE-2026-116812/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:41 GMTCVECVE-2026-116811: OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Templatehttps://agentprime.io/advisories/CVE-2026-116811/https://agentprime.io/advisories/CVE-2026-116811/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:40 GMTCVECVE-2026-116810: OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferenceshttps://agentprime.io/advisories/CVE-2026-116810/https://agentprime.io/advisories/CVE-2026-116810/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:39 GMTCVECVE-2026-116809: OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedurehttps://agentprime.io/advisories/CVE-2026-116809/https://agentprime.io/advisories/CVE-2026-116809/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:39 GMTCVECVE-2026-116808: OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valueshttps://agentprime.io/advisories/CVE-2026-116808/https://agentprime.io/advisories/CVE-2026-116808/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:38 GMTCVECVE-2026-116807: OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Queryhttps://agentprime.io/advisories/CVE-2026-116807/https://agentprime.io/advisories/CVE-2026-116807/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:37 GMTCVECVE-2026-116806: OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutationhttps://agentprime.io/advisories/CVE-2026-116806/https://agentprime.io/advisories/CVE-2026-116806/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:37 GMTCVECVE-2026-116805: OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.listhttps://agentprime.io/advisories/CVE-2026-116805/https://agentprime.io/advisories/CVE-2026-116805/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:36 GMTCVECVE-2026-108579: OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Exporthttps://agentprime.io/advisories/CVE-2026-108579/https://agentprime.io/advisories/CVE-2026-108579/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 15:57:48 GMTCVECVE-2026-93985: OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCEhttps://agentprime.io/advisories/CVE-2026-93985/https://agentprime.io/advisories/CVE-2026-93985/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 11:53:37 GMTCVEcriticalCVE-2026-93984: OpenPanel API through 2.3.0 Authentication Bypass via Unverified Client Secrethttps://agentprime.io/advisories/CVE-2026-93984/https://agentprime.io/advisories/CVE-2026-93984/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 11:53:36 GMTCVECVE-2026-93983: OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filterhttps://agentprime.io/advisories/CVE-2026-93983/https://agentprime.io/advisories/CVE-2026-93983/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 11:53:35 GMTCVECVE-2026-93982: OpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged Plaintexthttps://agentprime.io/advisories/CVE-2026-93982/https://agentprime.io/advisories/CVE-2026-93982/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 11:53:34 GMTCVECVE-2026-88893: OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosurehttps://agentprime.io/advisories/CVE-2026-88893/https://agentprime.io/advisories/CVE-2026-88893/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:41 GMTCVECVE-2026-88892: OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL Fetchhttps://agentprime.io/advisories/CVE-2026-88892/https://agentprime.io/advisories/CVE-2026-88892/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:40 GMTCVECVE-2026-88891: OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutationshttps://agentprime.io/advisories/CVE-2026-88891/https://agentprime.io/advisories/CVE-2026-88891/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:39 GMTCVECVE-2026-88890: OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifierhttps://agentprime.io/advisories/CVE-2026-88890/https://agentprime.io/advisories/CVE-2026-88890/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:38 GMTCVECVE-2026-85615: Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayoutshttps://agentprime.io/advisories/CVE-2026-85615/https://agentprime.io/advisories/CVE-2026-85615/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:10 GMTCVECVE-2026-85614: OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkerhttps://agentprime.io/advisories/CVE-2026-85614/https://agentprime.io/advisories/CVE-2026-85614/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:09 GMTCVEcriticalCVE-2026-85613: OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxyhttps://agentprime.io/advisories/CVE-2026-85613/https://agentprime.io/advisories/CVE-2026-85613/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:08 GMTCVECVE-2026-85612: OpenPanel before 2.3.0 SSRF via favicon and og endpointshttps://agentprime.io/advisories/CVE-2026-85612/https://agentprime.io/advisories/CVE-2026-85612/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:08 GMTCVECVE-2026-85611: OpenPanel before 2.3.0 Cross-Tenant BOLA via report procedureshttps://agentprime.io/advisories/CVE-2026-85611/https://agentprime.io/advisories/CVE-2026-85611/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:07 GMTCVECVE-2026-85610: OpenPanel before 2.3.0 Remote Code Execution via chart formulashttps://agentprime.io/advisories/CVE-2026-85610/https://agentprime.io/advisories/CVE-2026-85610/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:06 GMTCVECVE-2026-85609: Openpanel before 2.3.0 SSRF via Site Checker Endpointhttps://agentprime.io/advisories/CVE-2026-85609/https://agentprime.io/advisories/CVE-2026-85609/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:30:06 GMTCVECVE-2026-77769: OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundarieshttps://agentprime.io/advisories/CVE-2026-77769/https://agentprime.io/advisories/CVE-2026-77769/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 11:05:15 GMTCVECVE-2026-77768: OpenPanel report.get Returns Any Report by Identifier Without Checking Project Accesshttps://agentprime.io/advisories/CVE-2026-77768/https://agentprime.io/advisories/CVE-2026-77768/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 11:05:14 GMTCVE