Skip to contentIcewhale Casaos vulnerabilities
- icewhale casaosCasaOS <= 0.4.15 Unauthenticated File and Debug Data ExposureCVE-2025-34171Public exploit6.9 Medium
- icewhale casaos-userserviceUsername Enumeration in CasaOS via bypass of CVE-2024-24766CVE-2024-28232Fix available6.2 Medium
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS Improper Restriction of Excessive Authentication Attempts vulnerabilityCVE-2024-24767Fix available9.1 Critical
- icewhale casaos-userserviceCasaOS Username EnumerationCVE-2024-24766Fix available6.2 Medium
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS-UserService allows unauthorized access to any fileCVE-2024-24765Fix available7.5 High
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS Command Injection vulnerabilityCVE-2023-37469Fix available8.8 High
- icewhale casaosWeak json web token (JWT) secrets in CasaOSCVE-2023-37266Fix available9.8 Critical
- icewhale casaos, casaos-gateway +1 moreIncorrect identification of source IP addresses in CasaOSCVE-2023-37265Fix available9.8 Critical
- icewhale casaosCommand Injection in CasaOSCVE-2022-24193Fix available9.8 Critical