CVE-2026-41473 is an authentication bypass vulnerability affecting CyberPanel versions prior to 2.4.4. The issue resides in the AI Scanner worker API endpoints, specifically /api/ai-scanner/status-webhook and /api/ai-scanner/callback, which lack proper authentication checks. This allows unauthenticated remote attackers to write arbitrary data to the backend database. The vulnerability can be exploited to cause denial of service through storage exhaustion, corrupt scan history data, and inject malicious data into database fields. The CVSS 4.0 base score is 8.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on integrity and availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation allows unauthenticated attackers to write arbitrary data to the CyberPanel database via vulnerable API endpoints. This can result in denial of service through storage exhaustion, corruption of scan history records, and pollution of database fields with malicious data, impacting the integrity and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected API endpoints (/api/ai-scanner/status-webhook and /api/ai-scanner/callback) through network controls or firewall rules to prevent unauthenticated access. Monitor for unusual activity targeting these endpoints and consider disabling the AI Scanner feature if feasible.