1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-66508 · Microsoft / collected KEV context

EUVD-2025-201792

GHSA-7cqv-qcq2-r765

GO-2025-4207

cve-program · CVE-2025-66508

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765
• https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed

euvd · EUVD-2025-201792

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765
• https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed

nvd · CVE-2025-66508

• https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed
• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765

osv · GHSA-7cqv-qcq2-r765

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765
• https://nvd.nist.gov/vuln/detail/CVE-2025-66508
• https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed
• https://github.com/1Panel-dev/1Panel

osv · GO-2025-4207

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7cqv-qcq2-r765
• https://nvd.nist.gov/vuln/detail/CVE-2025-66508
• https://github.com/1Panel-dev/1Panel/commit/94f7d78cc9768ee244da33e09408017d1f68b5ed

No related operational record is retained in the current change model.