Medium
6.9
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows...
CVE-2026-116817
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Openpanel-dev | openpanel |
< 3.0.0 |
3.0.0 |
Original description The description as published by the source.
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access the Bull Board dashboard served on the worker HTTP port. Attackers can query /api/queues and call mutating Bull Board APIs to add, retry, or clean jobs and read queue data, metrics, and datastore health.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory