CVE-2025-12914 | aaPanel BaoTa up to 11.1.0 Backend database?action=GetDatabaseAccess Name sql injection

A vulnerability classified as critical has been found in aaPanel BaoTa up to 11.1.0. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection.

This vulnerability is documented as CVE-2025-12914. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.