CVE-2026-41473 CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints

What is CVE-2026-41473?

CVE-2026-41473 is a high-severity authentication bypass vulnerability in usmannasir cyberpanel, published on 24 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbitrary data to the database by sending requests to the /api/ai-scanner/status-webhook and /api/ai-scanner/callback endpoints. Attackers can exploit the lack of authentication checks to cause denial of service through storage exhaustion, corrupt scan history records, and pollute database fields with malicious data.

Weakness: CWE-306

Which versions are affected by CVE-2026-41473?

It affects 1 product.

Products include Cyberpanel Cyberpanel.

How do I fix CVE-2026-41473?

No fix has been published for CVE-2026-41473 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2026-41473 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41473 exists.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in usmannasir cyberpanel

• CVE-2024-51378 CyberPanel Incorrect Default Permissions Exploited Critical 10.0
• CVE-2024-51567 CyberPanel Incorrect Default Permissions Exploited Critical 10.0
• CVE-2024-51568 Command injection in n/a Critical 10.0
• CVE-2024-53376 Command injection in n/a High 8.8
• CVE-2019-13056 Cross-site request forgery in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xvg9-fp4q-jq9w.