References https://nvd.nist.gov/vuln/detail/CVE-2025-30206 https://github.com/advisories/GHSA-j752-cjcj-w847 https://0x20h.com/p/6fcd.html https://www.cnblogs.com/wh03ver/p/18858417 https://dpanel.cc/ https://github.com/donknap/dpanel https://cve.imfht.com/product/dpanel https://www.ameeba.com/blog/cve-2025-30206-hardcoded-jwt-secret-exploitation-in-dpanel-docker-management-system/
Related Vulnerabilitiesdpanel /api/app/compose/get-from-uri 文件读取漏洞(CVE-2025-53363)DPanel 硬编码漏洞(CVE-2025-30206)PoCCVE-2023-35885: Cloudpanel 2 < 2.3.1 - Remote Code Executioncloudpanel /file-manager/backend/makefile 任意文件上传漏洞(CVE-2023-35885)Cloudpanel file-manager 远程代码执行漏洞cloudpanel 任意文件上传漏洞(CVE-2023-35885)