Critical LiteSpeed Enterprise Vulnerability Allows Root Access · Update to 6.3.7 Now
Source Community Curated
What to do
Defenders should immediately verify their LiteSpeed Enterprise version and upgrade to 6.3.7 or later if running an affected version. They should also audit shared-hosting environments for potential privilege escalation risks and monitor for any future technical details or indicators of compromise released by vendors.
Description
A critical privilege-escalation vulnerability in LiteSpeed Web Server Enterprise versions before 6.3.7 allows a low-privilege shared-hosting user to potentially gain root access by bypassing isolation controls like CloudLinux CageFS. The advisory urges administrators to upgrade to version 6.3.7 or later to mitigate this risk. No CVE or public exploit details are currently available, but the issue is considered critical by cPanel.