If you have discovered a vulnerability in Hestia Control Panel, let our development team know via e-mail at info@hestiacp.com and we will respond as soon as possible.