This notice is to inform you of a critical security vulnerability recently identified in all cPanel servers:
CVE-2026-29203
An unsafe symlink handling error was found that allows a user to chmod an arbitrary file, allowing for denial of service and possible privilege escalation.
Action Taken
Our security team acted immediately upon the disclosure. We are pleased to confirm that remediation is complete:
Shared Hosting: All shared environments have been patched.
Client Virtual Servers (VPS): All managed virtual servers have been secured.
No action is required on your part. Your hosting environment and data remain secure.
The security of your data is our highest priority. If you have any questions regarding this update, please contact our support team.
