LiteSpeed User-End cPanel Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability, potentially leading to root access, has been identified in the LiteSpeed User-End cPanel Plugin versions prior to 2.4.5. This vulnerability was actively exploited in May 2026. The issue arises from improper handling of Redis cache management features, allowing unauthorized users to gain elevated privileges. The LiteSpeed WHM Plugin, which is the parent plugin, does not have this vulnerability.

Impact

Exploitation of this vulnerability could allow an attacker to gain unauthorized privileges, potentially escalating to root access.