GHSA-8x5w-4247-99g6

LiteSpeed Web Server Internal Redirect Validation Flaw Exposes Virtual Hosts to Unauthorized Access and Execution (CVE-2026-93903)

A critical URL validation defect in LiteSpeed Web Server before v6.3.7 build 1 permits remote actors to bypass rewrite rules and access internal handlers.