Dear Customers,
A critical security vulnerability has been identified in LiteSpeed Web Server and LSQUIC. This issue can be exploited relatively easily and requires immediate attention.
Action Required (for self-managed servers):
Update your LiteSpeed server to the latest version as soon as possible.
If you are unable to upgrade immediately, we recommend disabling HTTP/3 as a temporary mitigation.
More details from LiteSpeed: Official Security Update Notice
Good news for Managed Clients:
Our engineers are already on top of this issue and are actively patching all managed servers with LiteSpeed to ensure your environments remain secure. No action is required on your side if you are on a managed plan.
Thank you for your attention and for trusting us with your hosting security.
The Support Team
