Unrated

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via

Disclosed: 13.03.2018
Updated: 11.10.2026 12:19

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the server.

Affected software

Click a technology to see all vulnerabilities affecting it.

Platform	Package	Vulnerable versions	Fixed in
Python (PyPI)	ajenti-panel	all versions	no fix

References

CVSS score -

Weakness (CWE): -
Platform: Python (PyPI)
Package: ajenti-panel
Disclosed: 13.03.2018
Updated: 11.10.2026 12:19

Sources and licenses

OSV / GitHub Advisory Database - PYSEC-2018-112 - PyPA Advisory Database; CC BY 4.0

Vulnerability history: ajenti-panel

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

Total entries: 6
First → latest: 03.2018 04.2026
Without a fix: 5
Exploited in attacks: 0

Severity breakdown

High 1
Unrated 5

Disclosures per year

2018: 5
2019: 0
2020: 0
2021: 0
2022: 0
2023: 0
2024: 0
2025: 0
2026: 1

03.04.2026

Ajenti has an authorization bypass during custom package installation

High CVE-2026-35175 < 2.2.15 2.2.15
13.03.2018

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. Th

Unrated CVE-2018-1000126 all versions no fix
13.03.2018

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via this entry

Unrated CVE-2018-1000083 all versions no fix
13.03.2018

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server

Unrated CVE-2018-1000082 all versions no fix
13.03.2018

Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can

Unrated CVE-2018-1000081 all versions no fix
13.03.2018

Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable v

Unrated CVE-2018-1000080 all versions no fix

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application