The sqloptimizer utility script in cPanel and related WebPros products fails to properly sanitize SQL queries, permitting a privileged SQL injection that executes under the root account when Slow Query logging is active. This vulnerability enables an attacker to run arbitrary SQL commands with root privileges, potentially compromising confidentiality, integrity, and availability of the system’s database layer.

The flaw affects WebPros’ WP Squared, cPanel, and cPanel installations on CloudLinux 6 and CentOS 6. No specific version ranges are enumerated in the advisory, so any deployment of these products may be susceptible until a patch is applied.

With a CVSS score of 8.1 the risk is defined as high; the EPSS score is not available, so current exploitation probability remains uncertain. The anomaly is not listed in CISA’s KEV catalog, but the root‑level nature of the attack vector means exploitation would have severe consequences if an attacker can leverage the disabled Slow Query logging feature. The likely attack requires local privileged access or the ability to influence the logging process, possibly through the web interface or configuration files. Should the vulnerability be exploited, the attacker could execute destructive commands as root, leading to total system compromise.