CVE-2025-25873: Openpanel Openadmin

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function

Affected products

• Openpanel Openadmin: version 0.3.4 only

Published 2025-03-14. Last modified 2026-06-17.