Back to Changelog
Panel Backend
v1.0.530
Security hardening: privilege-escalation, command-injection and container-escape fixes plus safer storage shares.
Security Fixes
4- SSH privilege escalation via pn-cgroup-shell closed — the helper now verifies the calling user's identity, so a full-SSH account can no longer obtain a root shell.
- Root command injection in granular backup restore fixed — restore paths are now safely shell-quoted.
- Docker bind-mount symlink escape closed — the real path is resolved before the home-directory check.
- Storage SMB/NFS shares now require a client-IP allowlist, disable NetBIOS, and self-heal internet-exposed shares on startup (SH-110).