From a Stray Apostrophe to Root: Escalating a Standard HestiaCP Account to Full Server Compromise
A single quote in a directory name lets any standard HestiaCP user account escalate to root. Reported, confirmed, and fixed in HestiaCP 1.10.5. GHSA-r9q4-pmcm-5qqf, CVSS 9.9.