LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

A critical vulnerability in LiteSpeed Web Server Enterprise allows a low-privilege hosting account user to escalate privileges and gain root access on a shared hosting server. The flaw was disclosed in a cPanel advisory published on September 14, 2026. Shared hosting environments are particularly at risk since multiple customers share the same physical machine. An attacker exploiting this vulnerability could access, modify, or compromise other customers' websites and the underlying server infrastructure. The severity is high given the potential for cross-tenant compromise and full server takeover from a low-privilege starting point.