CVE-2025-34430 1Panel CSRF Panel Name Modification
A CSRF vulnerability in 1Panel allows attackers to modify the panel name by tricking authenticated users into visiting a malicious webpage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-34430?
CVE-2025-34430 is a medium-severity vulnerability in LXware 1Panel, published on 10 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality. The affected endpoint does not implement CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a panel-name change request; if a victim visits the page while authenticated, the browser includes valid session cookies and the request succeeds. This allows a remote attacker to change the victim’s panel name to an arbitrary value without consent.
Weakness: CWE-352
Which versions are affected by CVE-2025-34430?
3 open source packages ship an affected version, including github.com/1Panel-dev/1Panel. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/1Panel-dev/1Panel Go | All versions | None |
github.com/1Panel-dev/1Panel Go | From 1.10.33 to 2.0.15 | None |
github.com/1Panel-dev/1Panel Go | From 1.10.33 to 2.0.15 | None |
Products include Fit2cloud 1panel.
How do I fix CVE-2025-34430?
Upgrade to a fixed version.
Is CVE-2025-34430 being exploited?
There is no known exploitation of CVE-2025-34430 in the wild and no public exploit code.
Other vulnerabilities in LXware 1Panel
Sources
Also known as GHSA-5xpq-2vmc-5cqp, GO-2025-4230.