Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

LiteSpeed cPanel plugin may let attackers read other users' files

published recently · actively exploited

Summary

The LiteSpeed add‑on for cPanel on shared hosting servers using CloudLinux or CageFS can be tricked into following symbolic links. An attacker who already has FTP or web shell access could then view or copy files that belong to other customers. Apply the latest plugin update from LiteSpeed and ensure your hosting environment is kept current.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
litespeed	cpanel plugin	All versions

Original advisory text

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

Fix within

Internet-facing Within 14 days at most

Internal Within 14 days at most

Exploitation

Known exploited

Listed in the CISA KEV catalogue - exploitation confirmed in the wild.

Timeline

Updated29 Aug 2026

First seen29 Aug 2026

Track software like this

Free during beta