CVE-2025-34430: CSRF in 1Panel ≤2.0.15

The primary impact of this CSRF vulnerability is the ability for an attacker to modify a victim's 1Panel panel name. This could be used for malicious purposes such as impersonation, phishing attacks, or simply disrupting the user experience. An attacker could craft a malicious webpage containing a request to change the panel name. If a user visits this page while authenticated in 1Panel, their session cookies will be automatically included in the request, allowing the attacker to successfully change the panel name to an arbitrary value. While the immediate impact may seem limited, it can be a stepping stone for further attacks or used to create confusion and distrust among users.

1. Reserved2025-04-15
2. Published2025-12-10
3. Modified2025-12-23
4. EPSS updated2026-03-23

The recommended mitigation for CVE-2025-34430 is to upgrade 1Panel to a version that includes the fix. Unfortunately, the specific fixed version is not provided. Until an updated version is available, consider implementing temporary workarounds such as restricting access to the panel name management functionality to trusted users or implementing stricter authentication measures. Web application firewalls (WAFs) can be configured to detect and block suspicious CSRF requests based on patterns and referer checks. Monitor 1Panel logs for unusual panel name changes.