CVE-2022-26252: Aapanel

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa).

Affected products

• Aapanel Aapanel: version 6.8.21 only

Published 2022-03-27. Last modified 2026-06-17.