CVE-2026-111627
Description
A flaw was found in HestiaCP. This authorization bypass allows an authenticated administrator to perform unauthorized write operations while impersonating the protected root administrator account. Because the application fails to verify read-only restrictions during scheduled task creation, an attacker can configure cron jobs that execute arbitrary commands with root system privileges, resulting in privilege escalation.
Statement
This vulnerability is evaluated as Important because an authenticated non-root administrator can circumvent access restrictions when impersonating higher-privileged accounts to execute arbitrary tasks with system root privileges. The potential for complete host compromise warrants an Important rating rather than Moderate, despite requiring prior administrative access to the control panel. Red Hat products do not ship or support HestiaCP, so enterprise environments are not exposed by default.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
