aaPanel: OS command injection in File Manager
Summary
aaPanel up to and including 8.25.0 contains an OS command injection flaw in the File Manager function ExecShell (class/public/common.py). User-supplied values for file names, archive passwords, access rights and owners are passed unescaped to a shell command. An authenticated user can run arbitrary OS commands, which are typically executed as root on a Linux server. A public proof of concept exists.
Affected
- aaPanel up to and including 8.25.0 (version range per VulDB)
- The official CVE record lists versions 8.0 to 8.11; the range differs between sources.
Fixed in
Unknown. No vendor-confirmed fixed version was found.
Workaround
- Disable or restrict the File Manager until a fixed version is installed.
- Restrict access to the panel via VPN or an IP allowlist.
- Use strong, unique admin passwords and enable MFA where available.
Exploitation
- Authentication is required (PR:L).
- A public proof of concept is available; VulDB marks the exploit as public.
- Not listed as known exploited (no CISA KEV entry found at the time of research).
- EPSS is about 0.02 (low), per the Vulnrichment record.
Our recommendation
- Inventory all aaPanel instances and their versions.
- If the panel is reachable from the internet, restrict access now.
- Rotate admin credentials and enable MFA.
- Disable the File Manager if the business does not need it.
- Monitor the aaPanel vendor channel for a fixed release and re-check NVD and CISA once the record is final.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulDB CVE-2026-113506 entry vuldb.com
- Proof of concept repository (JdExploit) github.com
- Vulnrichment record (CVE-2026-113506) vulners.com
- OpenCVE CVE-2026-113506 app.opencve.io
- HOL Guard CVE-2026-113506 hol.org
- OffSeq Radar CVE-2026-113506 radar.offseq.com
- Strix CVE-2026-113506 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 07:35.
Original description (NVD)
A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: "The reported RCE and LFI vulnerabilities require authentication."
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.