Privilege_escalation

cPanel patched a critical privilege-escalation flaw (CVE-2026-58048) that allowed an authenticated hosting customer to run SQL as the database root, with a CVSS of 9.4, via a targeted security release that also closed two other account-boundary routes.

OpenClaw has a high-severity privilege-escalation flaw (CVE-2026-33579) in the pair-approve path, with patches available and affected versions limited to up to 2026.3.28; CVSS scores ~8.1-8.6, NVD status pending, and multiple advisories issued.