EUVD-2026-83588
GHSA-fxfp-52cf-vm9r
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with low-privilege OpenPanel account
-
ExploitCraft filter name with boolean SQL term
-
ExecutionInjected clause bypasses project-isolation WHERE check
-
ImpactRead metrics from other projects
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Parameterized queries, prepared statements
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Persistence The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires an authenticated OpenPanel account with access to at least one project (PR:L) and the ability to supply custom filter/property names that feed into ClickHouse analytics queries; the flaw exists only where property keys are passed unescaped into SQL (present through commit bad75bdd). Exploitation is limited to reading metrics data across project boundaries - it does not grant integrity or availability impact, does not require user interaction, and depends on the deployment using the vulnerable ClickHouse-backed metrics/filter feature. The authentication requirement and read-only, cross-tenant-metrics-only impact are the primary limiting factors reducing real-world risk. |
| Impact | This is a genuine but bounded confidentiality issue, not a top-priority emergency. The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L, score 5.3) tells a coherent story: network-reachable, low attack complexity, but requiring an authenticated low-privilege account (PR:L) and yielding only limited confidentiality impact (VC:L) with a limited subsequent-system effect (SC:L) reflecting cross-tenant/project isolation bypass. There is no integrity or availability impact. No EPSS score, no CISA KEV listing, and no public exploit code are provided in the intelligence - so exploitation status is 'no public exploit identified at time of analysis.' The CWE-89 (SQLi) classification is accurate but the description scopes it narrowly to boolean SQL term injection through unescaped ClickHouse property keys, used to read other projects' metrics rather than to dump arbitrary databases or achieve RCE. In short: a real multi-tenant data-isolation flaw worth patching, but the required authentication, limited read-only impact, and absence of exploitation signals place it well below high-CVSS-high-real-risk territory. All signals (CVSS vector and description) are internally consistent - no conflicts to flag. |
| Exploit ScenarioDerived | An attacker who holds a legitimate low-privilege account on an OpenPanel instance (e.g. a member of one project) crafts a malicious filter/property name that injects a boolean SQL term into the ClickHouse query, since property keys are not escaped. By manipulating the query's WHERE logic they defeat the per-project scoping and read analytics/metrics belonging to other tenants' projects. No public proof-of-concept exploit is identified in the provided intelligence. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 19, 2026
Authenticated SQL injection in OpenPanel's ClickHouse-backed metrics and filter functionality lets a user with access to at least one project inject boolean SQL terms through crafted property/filter keys, bypassing project isolation to read analytics metrics belonging to other projects. All deployments of OpenPanel up through commit bad75bdd that expose the ClickHouse metrics/filter feature are affected; the CVSS 4.0 base score is 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L), reflecting a bounded, read-only, cross-tenant confidentiality impact rather than code execution or data tampering. At the time of analysis there is no indication of confirmed active exploitation (CISA KEV) and no public exploit code identified; the primary risk drivers are the authentication requirement (PR:L) and the fact that only metrics data can be read, not modified.
RemediationAI
Apply the fix referenced in the vendor security advisory GHSA-cc5p-97vc-8fwv (https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-cc5p-97vc-8fwv) and confirm from that advisory the exact patched version or commit that supersedes bad75bdd; no standalone patched version number was independently confirmed from the supplied data, so treat the advisory as the single source of truth and upgrade every affected instance promptly. The correct code-level fix is to stop interpolating user-controlled property/filter keys into ClickHouse SQL and instead use bound parameters or a strict allow-list/escaping routine for identifiers, since parameterization of the predicate eliminates the boolean-injection primitive entirely with no functional loss. If immediate upgrade is not possible, reduce exposure by disabling or hiding the custom filter/property-name feature where the platform permits it (trade-off: users lose ad-hoc metrics filtering), restricting which accounts can reach the metrics API and narrowing per-user project membership so fewer users can influence cross-project queries (trade-off: operational overhead and reduced analyst flexibility), or isolating the ClickHouse backend so it is reachable only from trusted OpenPanel services rather than directly from user-facing paths. Note that these compensating controls only lower the probability of exploitation; they do not fix the underlying unescaped-key defect, and none of them mitigate a user who is already authorized to submit filter input. Monitor ClickHouse query logs for anomalous boolean-style predicates as a detection backstop, and note that there is no evidence of active exploitation to justify emergency change-window bypasses beyond normal patch prioritization.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), specifically the failure to escape or parameterize property keys that are interpolated into ClickHouse SQL queries. OpenPanel uses ClickHouse as its analytics/metrics store, and its filtering layer accepts user-supplied filter or property names that are concatenated into the query text rather than being treated as bound parameters or strictly escaped identifiers. Because ClickHouse evaluates these keys as part of the SQL expression, an authenticated user can inject boolean terms (for example within a WHERE clause) that alter the query's predicate logic, effectively disabling the project-scoping condition and returning metrics rows from other projects. This is a boolean/logic-injection variant rather than a classic UNION-based data-exfiltration primitive, which is consistent with the limited confidentiality-only impact (VC:L, SC:L) and the absence of integrity or availability effects in the assessed vector. The vulnerability is present through commit bad75bdd as identified by the vendor advisory (GHSA-cc5p-97vc-8fwv) and the VulnCheck advisory; CPE cpe:2.3:a:openpanel-dev:openpanel:*:*:*:*:*:*:*:* indicates all versions up to the fix are in scope. Exploitation only matters on deployments where the ClickHouse-backed metrics/filtering path is reachable by the authenticated user.
Know when Openpanel gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Authenticated low-privilege user (PR:L) injects SQL to cross project boundaries (S:C) exposing another tenant's metrics (C:L); no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
Code execution in OpenPanel's js-runtime component lets an authenticated user who holds project write access escape the
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function. Rated h
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function. Rated m
Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges
Server-side request forgery in OpenPanel before 2.3.0 lets unauthenticated remote attackers coerce the panel server into
Unauthenticated ClickHouse SQL injection in OpenPanel before 3.0.0 lets remote attackers read other tenants' analytics d
Sandbox escape in OpenPanel's JavaScript webhook-template runtime (packages/js-runtime) allows an authenticated project
Authenticated remote code execution in OpenPanel before 2.3.0 allows any project member with read access to escape the m
Unauthenticated information disclosure in OpenPanel (openpanel-dev/openpanel) exposes argon2id password hashes and full
Unauthenticated SSRF in OpenPanel before 2.3.0 exposes two utility endpoints - /misc/favicon and /misc/og - that blindly
Cross-tenant data exposure in OpenPanel before 3.0.0 lets any authenticated user read other projects' profiles, events a
Read-level project members in OpenPanel before 3.0.0 can retrieve plaintext integration secrets - Slack bot tokens, inco
Exploit-DB