CVE-2026-93982— OpenPanel MCP Authentication Token in Query Parameter Logged Plaintext
Quick assessment
Affected
Openpanel-dev openpanel
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
从提交 bad75bdd 开始的 OpenPanel 版本会将模型上下文协议（MCP）的认证令牌从 URL 查询参数中以未脱敏的明文形式写入应用程序日志。任何能够访问应用标准输出（stdout）或集中式日志系统的攻击者，都可以捕获这些 Base64 编码的凭据，从而重放 MCP 请求并访问项目分析数据。
Possible ATT&CK Techniques 3 AI
T1075 T1590 · Gather Victim Network Information T1567.002 · Exfiltration to Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-93982
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenPanel MCP Authentication Token in Query Parameter Logged Plaintext
Source: CVE Program / CVE List V5
Vulnerability Description
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests and access project analytics.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Openpanel-dev | openpanel | 0 ~ bad75bddc74d12d36cfb843f4531d3b830a8d994 | - |
|
II. Public POCs for CVE-2026-93982
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-93982
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-93982 (2)
Same Patch Batch · Openpanel-dev · 2026-09-19 · 4 CVEs total
| CVE-2026-93985 | 9.9 CRITICAL | OpenPanel js-runtime JavaScript Template Sandbox Escape RCE |
| CVE-2026-93984 | 5.3 MEDIUM | OpenPanel API Authentication Bypass via Unverified Client Secret |
| CVE-2026-93983 | 5.0 MEDIUM | OpenPanel SQL Injection via ClickHouse Property Key Filter |
IV. Related Vulnerabilities
Same product: openpanel
-
CVE-2026-93985
OpenPanel js-runtime JavaScript Template Sandbox Escape RCE -
CVE-2026-93983
OpenPanel SQL Injection via ClickHouse Property Key Filter -
CVE-2026-93984
OpenPanel API Authentication Bypass via Unverified Client Se -
CVE-2026-88893
OpenPanel Unauthenticated Share Lookup Information Disclosur -
CVE-2026-88892
OpenPanel SSRF via Unguarded Importer File URL Fetch
Same vendor: Openpanel-dev
-
CVE-2026-93985
OpenPanel js-runtime JavaScript Template Sandbox Escape RCE -
CVE-2026-93983
OpenPanel SQL Injection via ClickHouse Property Key Filter -
CVE-2026-93984
OpenPanel API Authentication Bypass via Unverified Client Se -
CVE-2026-88893
OpenPanel Unauthenticated Share Lookup Information Disclosur -
CVE-2026-88892
OpenPanel SSRF via Unguarded Importer File URL Fetch
Same weakness: CWE-532
-
CVE-2026-86049
Jupyter Server: 5xx request logging leaks token-bearing Refe -
CVE-2026-92758
Logs may collect sensitive information -
CVE-2026-82723
Actor record with password digest stored in AshAuthenticatio -
CVE-2026-92918
admin3 through 3.0.0 Session Token Disclosure via Audit Log -
CVE-2026-73457
Under certain circumstances, the gNPSI client credentials mi
V. Comments for CVE-2026-93982
No comments yet