A high-severity access control vulnerability in x-ui 0.3.2 allows an authenticated attacker to expose sensitive management interfaces to the network, potentially leading to unauthorized service control.

This vulnerability involves improper access control where any authenticated panel user can modify the xray configuration template, forcing the gRPC management service to bind to non-loopback addresses instead of the default local-only boundary.

The ability to expose an internal management gRPC service to external network interfaces significantly increases the attack surface of the infrastructure. Given the CVSS score of 7.6, this flaw poses a high risk of unauthorized service management, potential data compromise, and system instability if the management interface is accessed by unauthorized third parties.

Immediate Action: Since a specific patch is not currently identified, users should restrict access to the x-ui management interface via network-level firewalls and ensure only trusted users have authentication credentials.

Proactive Monitoring: Monitor server network configurations and logs for unexpected changes to the xray configuration template or unauthorized access attempts targeting the gRPC management port.

Compensating Controls: Implement strict network access control lists (ACLs) to ensure that the management interface remains isolated from untrusted networks regardless of the service configuration.

Public Exploit Available: Yes, a technical write-up containing attack details exists, attributed to the research provided in the TraceLoom repository.

The vulnerability presents a significant risk by bypassing intended network isolation for management services. Administrators must audit current x-ui configurations immediately and apply network-level restrictions to prevent the gRPC interface from becoming reachable over insecure network segments. Close monitoring of vendor channels for a formal patch release is essential for long-term remediation.