Lite Panel Pro Session Management Vulnerability Advisory

This cybersecurity advisory from ABB details a vulnerability (CVE-2025-4407) in Lite Panel Pro versions 1.0.1 and older, where the application fails to invalidate active user sessions after a password reset. An attacker with local network access could exploit this flaw to gain unauthorized access within a limited time window, and ABB recommends updating to firmware version 1.1.0 to resolve the issue.