Most recent entries from all

CVE-2026-35175 — Ajenti has an authorization bypass during custom package installation

2026-10-09T19:19:07.618266+00:00

Affected: ajenti

Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.

PYSEC-2026-2339 — Ajenti has an authorization bypass during custom package installation

2026-10-09T19:19:07.618369+00:00

Affected: PyPI: ajenti-panel

### Impact

An authenticated user (using the `auth_users` plugin authentication method) could install a custom package even if this user is not superuser.

### Patches

This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.