Vulnerabilities in Openpanel-dev
32 resultsCVE-2026-85614CRITICALOpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkerEPSS 0.3%CVE-2026-116810MEDIUMOpenPanel before 3.0.0 Missing Authorization via reference.getChartReferencesEPSS 0.3%CVE-2026-85611MEDIUMOpenPanel before 2.3.0 Cross-Tenant BOLA via report proceduresEPSS 0.2%CVE-2026-85615MEDIUMOpenpanel before 2.3.0 Cross-Tenant IDOR via report.getLayoutsEPSS 0.2%CVE-2026-116806MEDIUMOpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC MutationEPSS 0.2%CVE-2026-116813HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsEPSS 0.2%CVE-2026-116812HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filterEPSS 0.2%CVE-2026-116815MEDIUMOpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.tsEPSS 0.2%CVE-2026-116805MEDIUMOpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.listEPSS 0.2%CVE-2026-116809MEDIUMOpenPanel before 3.0.0 Missing Authorization in event.bots tRPC ProcedureEPSS 0.2%CVE-2026-108579LOWOpenPanel through 2.3.0 CSV Formula Injection via Cohort Member ExportEPSS 0.2%CVE-2026-93982MEDIUMOpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged PlaintextEPSS 0.2%