{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/openpanel--3.0.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:openpanel:openpanel:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-116808"},{"cvss":8.5,"id":"CVE-2026-116819"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenPanel (\u003c 3.0.0)"],"_cs_severities":["high"],"_cs_tags":["web-application","sql-injection","cve-2026-116808","information-disclosure","tRPC","openpanel"],"_cs_type":"advisory","_cs_vendors":["OpenPanel"],"content_html":"\u003cp\u003eOpenPanel versions prior to 3.0.0 are affected by an SQL injection vulnerability. Authenticated users can manipulate the 'property' parameter within the 'profile.values' endpoint to inject arbitrary SQL expressions. This allows attackers to bypass multi-tenancy protections by including custom SELECT statements, FROM/WHERE clauses, and SQL comments to isolate and exfiltrate profiles, events, and session data belonging to other projects.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized cross-tenant data access, specifically the exfiltration of sensitive information including user profiles, event logs, and session data stored within the OpenPanel platform.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade all instances of OpenPanel to version 3.0.0 or later to remediate CVE-2026-116808.\u003c/li\u003e\n\u003cli\u003eImplement request logging on the 'profile.values' endpoint to audit 'property' parameter values for potential SQL injection characters such as comment sequences (--) or SQL keywords (SELECT, UNION, FROM).\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T01:52:13Z","date_published":"2026-10-27T01:51:59Z","id":"https://feed.craftedsignal.io/briefs/2026-10-openpanel-sql-injection/","summary":"OpenPanel versions prior to 3.0.0 contain an SQL injection vulnerability in the profile.values endpoint that allows authenticated attackers to bypass cross-tenant controls and exfiltrate data from other projects.","title":"OpenPanel: SQL injection in profile.values (CVE-2026-116808)","url":"https://feed.craftedsignal.io/briefs/2026-10-openpanel-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenPanel (\u003c 3.0.0)","version":"https://jsonfeed.org/version/1.1"}