mirror of
https://github.com/cloudpanel-io/cloudpanel-ce.git
synced 2026-04-05 20:31:58 +02:00
Unknown and suspicious Admin user account appeared suddenly #129
Assignees
MrUnknownDE
Clear assignees
MrUnknownDE
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github/cloudpanel-ce#129
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @netlukewebs on 1/31/2025
CloudPanel version(s) affected
v2.4.0
Description
While checking the panel, Today I found a Unknown Admin account is present that is not created by me I updated the cloudPanel and removed that user. Not sure how this account appeared with full admin permission
.
How to reproduce
Not Sure.
Possible Solution
Some bug (I don't know if already fixed or not in the new version) maybe causing this vulnerability.
Additional Context
The unknown user has access to all the files, database and everything. So it's a big threat to any CloudPanel server's security. Please check. Thank You!