Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

A critical vulnerability in cPanel and WHM allows any authenticated user to escalate privileges to root level by abusing domain parking and addon domain features — functionality present in virtually every shared hosting environment. This is particularly dangerous because shared hosting servers house multiple customers, meaning one malicious or compromised account could expose every other tenant on the same server. The flaw highlights the risk of privilege escalation vulnerabilities in widely-deployed hosting control panels that are often slow to be patched by hosting providers. Because cPanel is ubiquitous in web hosting, the attack surface is enormous, and delayed patching leaves entire hosting infrastructures — and their customers — critically exposed.