CVE-2026-88893— OpenPanel Unauthenticated Share Lookup Information Disclosure
Quick assessment
Affected
Openpanel-dev openpanel
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenPanel 的共享查找过程未能验证访问控制，导致未认证的调用者可以获取密码哈希值和受保护报告定义。拥有共享链接的攻击者能够检索 argon2id 密码哈希值以及完整的报告配置（包括事件名称、过滤器和分解维度），从而用于离线密码破解和商业情报窃取。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-88893
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenPanel Unauthenticated Share Lookup Information Disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown dimensions for offline password cracking and business intelligence theft.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Openpanel-dev | openpanel | 0 ~ worker | - |
|
II. Public POCs for CVE-2026-88893
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-88893
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-88893 (2)
Same Patch Batch · Openpanel-dev · 2026-09-10 · 4 CVEs total
| CVE-2026-88890 | 8.5 HIGH | OpenPanel SQL Injection via unvalidated profile filter column identifier |
| CVE-2026-88891 | 8.3 HIGH | OpenPanel Read-Only Access Level Enforcement Bypass via Mutations |
| CVE-2026-88892 | 5.0 MEDIUM | OpenPanel SSRF via Unguarded Importer File URL Fetch |
IV. Related Vulnerabilities
Same product: openpanel
-
CVE-2026-88891
OpenPanel Read-Only Access Level Enforcement Bypass via Muta -
CVE-2026-88892
OpenPanel SSRF via Unguarded Importer File URL Fetch -
CVE-2026-88890
OpenPanel SQL Injection via unvalidated profile filter colum -
CVE-2026-85615
Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayou -
CVE-2026-85613
OpenPanel Unauthenticated XSS via SVG Favicon Proxy
Same vendor: Openpanel-dev
-
CVE-2026-88891
OpenPanel Read-Only Access Level Enforcement Bypass via Muta -
CVE-2026-88892
OpenPanel SSRF via Unguarded Importer File URL Fetch -
CVE-2026-88890
OpenPanel SQL Injection via unvalidated profile filter colum -
CVE-2026-85615
Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayou -
CVE-2026-85613
OpenPanel Unauthenticated XSS via SVG Favicon Proxy
Same weakness: CWE-200
-
CVE-2026-88013
rclone: http backend forwards custom/auth headers to a diffe -
CVE-2026-88876
AVideo PlayerSkins seo.php Missing Authorization Password-Pr -
CVE-2026-88874
AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Auth -
CVE-2026-0305
Prisma Access Agent: Information Disclosure Vulnerability on -
CVE-2026-87017
Open WebUI: Inaccessible knowledge bases are exposed through
V. Comments for CVE-2026-88893
No comments yet