CVE Tools

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

The Hacker NewsBy The Hacker News

AdvisoryLiteSpeed Web Server EnterprisecPanel

Our summary

cPanel issued an advisory warning that a critical vulnerability in LiteSpeed Web Server Enterprise versions prior to 6.3.7 allows low-privilege users to escalate privileges and gain root access on shared hosting servers. This flaw enables attackers to bypass containment controls like CageFS, potentially compromising other websites hosted on the same machine. Administrators are urged to manually update to version 6.3.7 using the provided script, as automatic updates may be delayed.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store