OpenPanel - Unauthenticated Bull Board Queue Dashboard
CVE-2026-116817
Early Release
Description
OpenPanel before 3.0.0 contains a broken authentication vulnerability caused by missing authentication on the Bull Board dashboard served on the worker HTTP port, letting unauthenticated attackers access and modify queue data and jobs, exploit requires no authentication.
Severity
Medium
CVSS Score
6.5
Exploit Probability
0%
Affected Product
openpanel
Published Date
October 27, 2026
Template Author
kosoyyagent
CVE-2026-116817.yaml
6.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVE ID:
cve-2026-116817
CWE ID:
cwe-306
Remediation Steps
Update to version 3.0.0 or later.