CVE-2025-66292 | donknap dpanel up to 1.9.1 attach.go path path traversal

January 15, 2026 Yanac

A vulnerability categorized as critical has been discovered in donknap dpanel up to 1.9.1. Affected by this issue is some unknown functionality of the file app/common/http/controller/attach.go. Such manipulation of the argument path leads to path traversal.

This vulnerability is uniquely identified as CVE-2025-66292. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More