reviactyl/panel

GitHub

github.com

reviactyl.app

Releases33

Frequency1 week 3 days

Last Release about 1 month ago

Stars134

Reviactyl is a modern and open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. It focuses on security and performance by running every game server inside isolated Docker containers while providing users with a clean and intuitive interface.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-34456 ↗	Apr 1, 2026Wednesday, 1 April 2026, 20:16	9.1 CRITICAL	—
Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 to before version 26.2.0-beta.5, a vulnerability in the OAuth authentication flow allowed automatic linking of social accounts based solely on matching email addresses. An attacker could create or control a social account (e.g., Google, GitHub, Discord) using a victim’s email address and gain full access to the victim's account without knowing their password. This results in a full account takeover with no prior authentication required. This issue has been patched in version 26.2.0-beta.5.