Manually applying the Patch via Rescue Mode

For people with encrypted files please see this post: cyberpanel 0day leaked attack script · GitHub

This post will be updated with more information as we get it.

If anyone is still using Centos 7 or can not get SSH access to the server, you can try this manual patch.

Update the infected file

Once you get access to your server in rescue mode you can edit the following file

/usr/local/CyberCP/databases/views.py

Now update the content of this file with with content from our latest patched version. Which you can find here: https://raw.githubusercontent.com/usmannasir/cyberpanel/refs/heads/v2.3.8/databases/views.py

Please also read: Detials and fix of recent security issue and patch of CyberPanel

1 Like

What to do next after changing that file?

I’ve added the link on main post, please check cyberpanel 0day leaked attack script · GitHub

After update my server is completely down. I was not able to log in ssh. Some how i manage to login. And get back live cyberpanel. I can see my websites lists but sites are not working.
Any solution for me?
Thank you

1 Like

you have upgraded and your server is dead now ? wow

what version of linux are you using ?

my view.py is locked how can I update the file?

i just accet [via Rescue Mode i it say

same thing to me. How can we solve this @usman?

You can upgrade the views.py manually and then can apply this as per the guide.