OpenPanel contains a parameterized flaw where profile.* filter column identifiers are not validated before being interpolated into ClickHouse WHERE clauses. The vulnerability allows an attacker with project‑scoped read or root export credentials to inject arbitrary ClickHouse SQL and exploit a blind boolean oracle. As a result, an authenticated user can bypass project isolation and read confidential analytics data and profile PII, which is a classic example of CWE‑89.

OpenPanel, developed by Openpanel‑dev, is affected in any release up to and including version 2.3.0. The flaw resides in the analytics filter builder of these versions; newer releases after 2.3.0 are presumed to contain the fix.

The CVSS score of 8.4 indicates high severity. The EPSS score is less than 1 %, suggesting a very low but non‑zero probability of exploitation at the time of analysis. The vulnerability is not listed in CISA KEV. The attack requires authenticated access with project‑scoped read or root export permissions, limiting the vector to legitimate users or those who gain credentials. Once authenticated, an attacker can inject queries to read data across organizational boundaries and exfiltrate sensitive data. Because the attack leverages existing authenticated connections, exploitability is high for environments that do not enforce strict privilege separation for analytics queries.