Mcsam

**Name of the Vulnerable Software and Affected Versions** CyberPanel version 2.4.3 **Description** The file manager component allows authenticated attackers to read sensitive system files. This occurs because the application fails to validate symbolic links (shortcuts that point to another file or directory) within a ZIP archive before extraction. By uploading a crafted ZIP archive containing symbolic links targeting paths outside the user's home directory, an attacker can cause these links to persist on disk and access the targeted files through the web interface. **Recommendations** Update CyberPanel version 2.4.3 to the version containing commit eca0c3c.

**Name of the Vulnerable Software and Affected Versions** CyberPanel version 2.4.3 **Description** An authenticated remote code execution issue exists in the remote backup feature. Authenticated attackers can obtain root-level SSH access by providing a malicious remote server address. This is possible because the process for retrieving SSH public keys is unverified, allowing an attacker to write a controlled public key directly to the `/root/.ssh/authorized keys` file, which grants persistent root access to the host system. **Recommendations** Update CyberPanel version 2.4.3 to the version containing commit eca0c3c.

**Name of the Vulnerable Software and Affected Versions** CyberPanel version 2.4.3 **Description** An authenticated command injection issue exists in the remote backup transfer feature. Authenticated attackers can execute arbitrary OS commands by controlling the API response of a remote server. By providing a crafted directory name in the remote server's API response, the attacker can bypass security middleware validation, as the input is passed unsanitized to the OS command execution function. **Recommendations** Update CyberPanel version 2.4.3 to the version containing commit eca0c3c.