{"id":"CVE-2026-116819","kind":"vulnerability","aliases":["CVE-2026-116819"],"related":[],"title":"OpenPanel: read-only project members can see plaintext integration secrets","description":"OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems.","summary":"OpenPanel before 3.0.0 returns notification integration secrets in plaintext from the notification.rules tRPC query because it skips the redaction step. A project member with read-level access can retrieve Slack bot tokens, webhook URLs and authorization headers and use them against external systems.","severity":"high","cvss":8.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["openpanel","package","self-hosted","slack","webhooks"],"not_affected_if":["already-upgraded","no-notification-integrations"],"how_to_check":"- Check the OpenPanel version in use; affected builds are below `3.0.0`.\n- Review which accounts hold read-level access to projects that have Slack or webhook notification integrations.\n- unknown whether the sources list a specific endpoint log or audit check.","fix":"- Upgrade OpenPanel to `3.0.0` or later.\n- Rotate any Slack bot tokens, webhook URLs and authorization headers that were stored in notification integrations and may have been exposed to read-level members.","status":"open","published_at":"2026-10-27T00:17:16+00:00","first_seen_at":"2026-10-27T00:25:55+00:00","triaged_at":"2026-10-27T00:26:15+00:00","updated_at":"2026-10-27T00:26:15+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-27T00:26:15Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenPanel to `3.0.0` or later.\n- Rotate any Slack bot tokens, webhook URLs and authorization headers that were stored in notification integrations and may have been exposed to read-level members.","reach":"internet","title":"OpenPanel: read-only project members can see plaintext integration secrets","impact":"medium","summary":"OpenPanel before 3.0.0 returns notification integration secrets in plaintext from the notification.rules tRPC query because it skips the redaction step. A project member with read-level access can retrieve Slack bot tokens, webhook URLs and authorization headers and use them against external systems.","category":"package","nicknames":[],"who_cares":["openpanel","self-hosted","slack","webhooks"],"confidence":0.7,"needs_auth":"yes","worst_case":"Read-level members obtain Slack tokens and webhook credentials for external systems.","analyst_note":"Confirm the exact fixed version and whether a hosted OpenPanel offering was patched; the NVD entry is the only source given.","how_to_check":"- Check the OpenPanel version in use; affected builds are below `3.0.0`.\n- Review which accounts hold read-level access to projects that have Slack or webhook notification integrations.\n- unknown whether the sources list a specific endpoint log or audit check.","needs_analyst":true,"not_affected_if":["already-upgraded","no-notification-integrations"],"who_is_affected":"Teams that self-host OpenPanel below `3.0.0` and have notification integrations (Slack bots, webhooks, authorization headers) configured in projects where some members hold only read access. Exposure depends on those secrets being stored in the integrations; instances without such integrations or already on `3.0.0` are not affected.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000652,"input_tokens":3332,"output_tokens":638,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116819':14A,17A '-2026':13A,16A '3.0.0':27B,71C 'access':52B 'allow':78C 'attack':95C 'author':61B,110C 'bot':56B,105C 'call':97C 'contain':72C 'cve':12A,15A 'disclosur':75C 'extern':67B,115C 'header':62B,111C 'host':22B 'inform':74C 'integr':10A,30B,87C 'level':51B,81C 'member':6A,47B,83C 'notif':29B 'notification.rules':36B,91C,99C 'obtain':85C 'openpanel':1A,18B,25B,69C 'packag':19B 'plaintext':9A,33B,86C 'project':5A,46B,82C 'queri':38B,92C,101C 'read':3A,50B,80C 'read-level':49B,79C 'read-on':2A 'redact':43B 'redactintegr':94C 'retriev':54B,103C 'return':28B 'secret':11A,31B,88C 'see':8A 'self':21B 'self-host':20B 'skip':41B,93C 'slack':23B,55B,104C 'step':44B 'system':68B,116C 'token':57B,106C 'trpc':37B,100C 'url':59B,108C 'use':64B,113C 'vulner':76C 'webhook':24B,58B,107C","nicknames":[],"mitigations":[],"who_affected":"Teams that self-host OpenPanel below `3.0.0` and have notification integrations (Slack bots, webhooks, authorization headers) configured in projects where some members hold only read access. Exposure depends on those secrets being stored in the integrations; instances without such integrations or already on `3.0.0` are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T00:17:16+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116819","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116819","severity":null,"published_at":"2026-10-27T00:17:16+00:00","modified_at":"2026-10-27T00:17:16+00:00","first_seen_at":"2026-10-27T00:25:55+00:00","fetched_at":"2026-10-27T00:25:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}