---
id: 3742
title: "[CVE-2025-15586] Vibe Hacking: Finding Auth Bypass and RCE in Open Game Panel"
cve: CVE-2025-15586
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/vibe-hacking-open-game-panel-rce/"
published_at: "2025-04-30 05:52"
tags: ["rce", "authentication-bypass", "open-game-panel", "type-juggling", "cve-2025-15586"]
phying_url: "https://phying.com/item/3742"
lang: en
---

# [CVE-2025-15586] Vibe Hacking: Finding Auth Bypass and RCE in Open Game Panel

## Summary

Vibe hacking Open Game Panel: an MD5 type-juggling flaw enables login with magic-hash passwords (CVE-2025-15586), while a Semgrep-assisted LFI escalates to authenticated RCE via include().

## Intelligence Metadata

- **Sources:** projectblack.io
- **CVE:** CVE-2025-15586
- **Published:** 2025-04-30 05:52
- **Original:** https://projectblack.io/blog/vibe-hacking-open-game-panel-rce/
- **Phying News:** https://phying.com/item/3742