LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/06/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| litespeed cpanel plugin | < 2.4.8 | 2.4.8 |
| litespeed whm plugin | < 5.3.2.0 | 5.3.2.0 |
LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free