CVE-2026-71965 affects CyberPanel versions up to and including 2.4.3. The vulnerability arises from the remote backup feature's failure to properly verify the authenticity of SSH public keys retrieved from remote servers. An authenticated attacker can exploit this by providing a malicious remote server address, causing the system to write the attacker's SSH public key directly into /root/.ssh/authorized_keys. This grants the attacker persistent root-level SSH access, effectively enabling remote code execution with high privileges. The vulnerability was fixed in a commit identified as eca0c3c, but no official patch release or advisory details are provided in the input data.

Successful exploitation grants an authenticated attacker persistent root-level SSH access to the affected host system. This level of access allows full control over the system, including the ability to execute arbitrary commands, modify system configurations, and maintain persistence. The vulnerability significantly compromises the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability was fixed in commit eca0c3c, so applying the fix from this commit or upgrading to a version including this fix is recommended once available. Until then, restrict access to the remote backup feature to trusted users only and monitor for unauthorized SSH key modifications.