GO-2025-3834: 1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core

core

module

v0.0.0-...-133a027 Latest Latest Go to latest Published: Nov 3, 2026 License: GPL-3.0

Details

Path	Synopsis
app
api/v2
api/v2/helper
auth
dto
model
repo
service
task
buserr
cmd
server command
server/app
server/cmd
server/conf
server/docs
server/res
server/web
constant
deps
global
i18n
init
auth
cron
cron/job
db
geo
hook
log
migration
migration/helper
migration/migrations
proxy
router
session
session/psession
swagger
validator
viper
log
middleware
router
server
utils
alert_webhook
apikey_audit
apikey_migration
captcha
clientip
cloud_storage
cmd
common
controller
controller/manager
copier
csv
ctl_conf
encrypt
files
geo
mcp
mcpapi Package mcpapi sends an already-authorized MCP operation through the existing Core HTTP application without exposing an HTTP header-based identity bridge.	Package mcpapi sends an already-authorized MCP operation through the existing Core HTTP application without exposing an HTTP header-based identity bridge.
mcpapi/metadata
mcpruntime
menutree
mfa
passkey
publicshare
re
req_helper
req_helper/proxy_local
security
ssh
terminal
terminal_session
ttlstore
upgrade
xpack
xpack/helper
xpack/providers