A critical broken authorization flaw in HestiaCP allows a low-privileged user to take over administrator accounts, leading to remote code execution. This vulnerability poses a severe risk to systems using HestiaCP, enabling attackers to gain full control. Users are advised to apply any available patches or implement mitigation strategies immediately.