Team members can have full acces to WHMCS

Benito

• October 29, 2025 18:27

Hi everyone! Today I was experimenting with the Team Members section in cPanel and found something that concerns me. When I create a Team Member regardless of the role assigned they can always see the WHMCS integration. Therefore, even a user without privileges can access WHMCS and from there enter cPanel with full permissions. Is there any way to prevent this?

• 

  quietFinn

  • October 29, 2025 19:28

  I always remove those WHMCS application links. They are also problematic if one WHMCS account has 2 or more cPanel accounts, and those must not get access to WHMCS.

   

  0
• 

  cPRex Jurassic Moderator

  • October 30, 2025 13:49

  Thanks for pointing this out - our team has created case SEC-70201 to look into this behavior and if I hear any updates on my end I'll be sure to post!

  0

Please sign in to leave a comment.