Auth bypass in Opengamepanel Ogp-Website

CVE-2025-15586

OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authentication bypass without knowledge of the victim account's password.

Vulnerability class: Broken Authentication

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References