Back to Security Advisories

Security: LiteSpeed cPanel Plugin – May 31, 2026

A combination of two vulnerabilities in the LiteSpeed cPanel plugin allowed an authenticated cPanel user to escalate privileges to root, including on servers running CloudLinux and CageFS.

High
CloudLinux cPanel LiteSpeed

Default Update CMD

sudo /scripts/upcp --force

Situation

A combination of two vulnerabilities in the LiteSpeed cPanel plugin allowed an authenticated cPanel user to escalate privileges to root, including on servers running CloudLinux and CageFS.

Currently affected versions are v5.3.1 of the LiteSpeed WHM plugin and lower.

Impact

In order to mitigate this vulnerability further, it is recommended to disable the LiteSpeed User-End Plugin for cPanel. 

Note: The LiteSpeed web service will continue to function without issue.

Call to Action

This has been resolved as of the LiteSpeed WHM plugin v5.3.2.0 (cPanel user-end plugin v2.4.8). Use the following to perform an update to LiteSpeed:

# /usr/local/lsws/admin/misc/lsup.sh

If the LiteSpeed version cannot be updated, it is recommended to remove plugin using the following command:

# /usr/local/lsws/admin/misc/lscmctl cpanelplugin –uninstall

How to Apply the Fix

Update the affected packages on your server to the patched release, then restart the relevant services.

sudo /scripts/upcp --force

References

Security Advisories

Related Advisories

Security: Privilege Escalation via Phusion Passenger’s Watchdog API

2026-09-08

Security: GCVE-25-2026-07-45-3 Exim .forward Privilege Escalation

2026-09-08

Security: CVE-2026-58048 Database Privilege Escalation

2026-09-08

Check your system for vulnerabilities

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Check Your System