{"id":"CVE-2026-116819","state":"PUBLISHED","title":"OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query","description":"OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems.","publishedAt":"2026-10-26T23:05:46.288Z","updatedAt":"2026-10-26T23:05:46.288Z","severity":{"score":8.4,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Openpanel-dev openpanel"],"affected":[{"vendor":"Openpanel-dev","product":"openpanel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.0.0","versionType":"semver"},{"version":"3.0.0","status":"unaffected","versionType":"semver"}]}],"references":["https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-wfrw-rm3f-52x8","https://github.com/Openpanel-dev/openpanel/commit/071c736c4539c005ac32647f2cfc6dec89cfb596","https://www.vulncheck.com/advisories/openpanel-before-3.0.0-credential-disclosure-via-notification-rules-query"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:10:43.281Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/116xxx/CVE-2026-116819.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-116819","state":"PUBLISHED","datePublished":"2026-10-26T23:05:46.288Z","dateUpdated":"2026-10-26T23:05:46.288Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-10-26T22:13:56.315Z"},"containers":{"cna":{"title":"OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query","descriptions":[{"lang":"en","value":"OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems."}],"affected":[{"vendor":"Openpanel-dev","product":"openpanel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.0.0","versionType":"semver"},{"version":"3.0.0","status":"unaffected","versionType":"semver"}]}],"references":[{"url":"https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-wfrw-rm3f-52x8","tags":["vendor-advisory"],"name":"GitHub Security Advisory (GHSA-wfrw-rm3f-52x8)"},{"url":"https://github.com/Openpanel-dev/openpanel/commit/071c736c4539c005ac32647f2cfc6dec89cfb596","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openpanel-before-3.0.0-credential-disclosure-via-notification-rules-query","name":"VulnCheck Advisory: OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","baseScore":8.4,"baseSeverity":"HIGH"}},{"format":"CVSS","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-10-26T23:05:46.288Z"},"datePublic":"2026-10-11T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpanel:openpanel:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.0"}]}]}],"credits":[{"lang":"en","value":"hackchang","type":"finder"}],"x_generator":{"engine":"vulncheck-endgame"}}}}}