KubePi
1Panel-dev · 5 CVEs
CVE-2026-65956
CRITICAL
KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF
Aug 26, 2026
CVE-2026-69129
MEDIUM
KubePi: Insufficient per-cluster authorization checks in cluster management APIs
Aug 26, 2026
CVE-2024-36111
MEDIUM
KubePi's JWT token validation has a defect
Jul 25, 2024
CVE-2023-37916
HIGH
Leak password hash of any user
Jul 21, 2023
CVE-2023-37917
CRITICAL
Privilege Escalation in kubepi
Jul 21, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-65956 | KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF | CRITICAL | 0.64% | Aug 26, 2026 |
| CVE-2026-69129 | KubePi: Insufficient per-cluster authorization checks in cluster management APIs | MEDIUM | 0.41% | Aug 26, 2026 |
| CVE-2024-36111 | KubePi's JWT token validation has a defect | MEDIUM | 8.39% | Jul 25, 2024 |
| CVE-2023-37916 | Leak password hash of any user | HIGH | 0.81% | Jul 21, 2023 |
| CVE-2023-37917 | Privilege Escalation in kubepi | CRITICAL | 0.74% | Jul 21, 2023 |
Showing 1 to 5 of 5 CVEs