1Panel-dev KubePi

• CVE-2026-65956 Critical 10.0 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF 0.6%
• CVE-2026-69129 Medium 5.8 KubePi: Insufficient per-cluster authorization checks in cluster management APIs 0.4%
• CVE-2024-36111 Medium 6.3 KubePi's JWT token validation has a defect 8.4%
• CVE-2023-37916 Medium 6.5 Leak password hash of any user 0.8%
• CVE-2023-37917 Critical 9.1 Privilege Escalation in kubepi 0.7%