High · published December 10, 2025
🚨 A crafty CSRF vulnerability is lurking in 1Panel versions 1.10.33 - 2.0.15, allowing attackers to change usernames with just a cleverly crafted link! ⚡ Think of this like a restaurant where anyone can change your reservation just by sending you a fake menu. If you're not careful, you might show up to find your name missing from the list! This vulnerability is a serious threat: an attacker could trick a user into visiting a malicious page, leading to unauthorized username changes. Once this happens, the user gets locked out — they can’t log in with their original username, effectively denying them access. Imagine losing your seat at the table, not just temporarily, but for good!
Think of this like a restaurant where anyone can change your reservation just by sending you a fake menu. If you're not careful, you might show up to find your name missing from the list! This CSRF vulnerability occurs because the Change Username functionality lacks essential protections like anti-CSRF tokens or proper Origin/Referer validation, allowing an attacker to submit username-change requests while a victim is authenticated.
This vulnerability is a serious threat: an attacker could trick a user into visiting a malicious page, leading to unauthorized username changes. Once this happens, the user gets locked out — they can’t log in with their original username, effectively denying them access. Imagine losing your seat at the table, not just temporarily, but for good! To remediate this, upgrade 1Panel to version 2.0.16 or higher, which addresses this flaw. Implement CSRF tokens for sensitive endpoints and ensure Origin/Referer headers are validated to prevent unauthorized requests. Don't let your users become victims! This is fixable, and you’ve got this! 🛡️ Let's lock it down and keep your users safe!
| Product | Versions | Fixed in |
|---|---|---|
| fit2cloud/1panel | ≥ 1.10.33-lts, ≤ 2.0.15 | — |