CVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability — Fixed versions

Summary

LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

Remediation

Inventory every LiteSpeed cPanel Plugin deployment, including staging.
Upgrade LiteSpeed cPanel Plugin to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.
Review logs from before the change for signs of exploitation.

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

Advisoryhttps://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/
Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-48172
Referencehttps://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel
Referencehttps://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log
Referencehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48172

Version	Fixed in
2.3 – <2.4.7	2.4.7
0 – <5.3.1.0	5.3.1.0