LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

A vulnerability in LiteSpeed Web Server Enterprise has been identified that could allow a user with a low-privilege website account to gain root access on a shared hosting server. This could have significant implications for servers where multiple customers' sites are hosted on a single machine. An attacker with a hosting account could potentially exploit the flaw to access or modify other sites on the server, as well as the server itself. The vulnerability was highlighted in an advisory published by cPanel on September 14.