CVE-2026-88893
Deferred Deferred - Pending Action

OpenPanel Share Access Control Bypass Exposes Password Hashes

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: VulnCheck

Description
OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown dimensions for offline password cracking and business intelligence theft.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-88893
EUVD
EUVD-2026-75443

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openpanel openpanel to worker (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authentication bypass in OpenPanel's share lookup functionality. It allows unauthenticated users to access sensitive data like argon2id password hashes and report configurations by querying share records through specific procedures. Attackers only need a share link to exploit this issue.

Detection Guidance

Check OpenPanel logs for unusual access to share.report, share.dashboard, or share.overview procedures. Monitor network traffic for unauthenticated requests to these endpoints. Use tools like curl to test if share URLs return sensitive data without authentication. Example: curl -v 'http://target/share.report?id=SHARE_ID' to verify if password hashes or report configs are exposed.

Impact Analysis

Attackers can retrieve password hashes and report configurations, enabling offline password cracking to gain full access to protected content. They can also steal business intelligence by accessing event names, filters, and breakdown dimensions from reports.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access controls. It exposes sensitive data such as password hashes and report configurations, which could lead to unauthorized access and data breaches, impacting GDPR and HIPAA compliance.

Mitigation Strategies

Apply the latest OpenPanel patch immediately. Disable share functionality if unused. Restrict network access to OpenPanel instances via firewalls. Rotate all exposed argon2id password hashes and credentials. Monitor for unauthorized access attempts post-patch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88893. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart