CVE-2026-41473 is an authentication bypass vulnerability affecting CyberPanel versions before 2.4.4. It impacts the AI Scanner worker API endpoints, specifically /api/ai-scanner/status-webhook and /api/ai-scanner/callback, which lack proper authentication checks. This allows unauthenticated attackers to write arbitrary data to the backend database. The vulnerability can be exploited to cause denial of service through storage exhaustion, corrupt scan history, and inject malicious data into database fields. The CVSS 4.0 base score is 8.8, reflecting network attack vector, no required privileges or user interaction, and high impact on integrity and availability. No official fix or patch has been documented at this time.

Successful exploitation enables unauthenticated remote attackers to write arbitrary data to the CyberPanel database via vulnerable API endpoints. This can result in denial of service conditions caused by storage exhaustion, corruption of scan history records, and contamination of database fields with malicious data. The integrity and availability of the affected system are significantly impacted. There are no reports of active exploitation in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable API endpoints if possible, such as by network-level controls or firewall rules. Monitor for unusual activity targeting the /api/ai-scanner/status-webhook and /api/ai-scanner/callback endpoints. Avoid exposing these endpoints to untrusted networks.