EUVD-2026-69798
GHSA-2cvx-7j4v-8m5g
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Requires authenticated subuser (PR:L); network-reachable with no special conditions; full C/I/A impact scoped within the affected server.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full server control, enabling unauthorized access to sensitive data, backups, and server configuration.
AnalysisAI
Privilege escalation in FeatherPanel before v1.3.7.10 permits any authenticated subuser to rewrite their own permission record via the SubuserController::updateSubuser handler, immediately gaining full server control. The root cause (CWE-862 Missing Authorization) is confirmed by the fix commit, which adds USER_UPDATE permission enforcement, a self-modification block, and whitelist validation of permission names - none of which existed in the vulnerable code path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must already be an authenticated subuser on the target FeatherPanel-managed server - meaning they must have been explicitly invited by the server owner. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) accurately reflects the attack profile: network-reachable, low complexity, requires only a subuser account, and yields full server control. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to FeatherPanel v1.3.7.10, released by MythicalLTD and available at https://github.com/MythicalLTD/FeatherPanel/releases/tag/v1.3.7.10; the exact fixing commit is `06ef8dcac471201748516ca743694159cb846a9d`. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all FeatherPanel deployments and identify instances running versions prior to 1.3.7.10; determine the number of subuser accounts and their privilege levels. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today