CyberRota Analysis
AI-GeneratedCyberPanel 2.4.3 is vulnerable to an authenticated remote code execution flaw in its remote backup feature, allowing authenticated attackers to exploit the unverified SSH public key retrieval process. By providing a malicious remote server address, attackers can write their public key to /root/.ssh/authorized_keys, resulting in persistent root-level SSH access to the system. Organizations using this version of CyberPanel should prioritize immediate patching to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public key retrieval process to write an attacker-controlled public key directly to /root/.ssh/authorized_keys, granting persistent root access to the host system.