Symptoms
Users are unable to complete the Send Password Reset Link workflow in cPanel. After clicking the link in the email, entering a new password, and submitting the form, the process fails with an error instead of accepting the new password.
Description
The /usr/local/cpanel/Cpanel/Admin/Modules/Cpanel/api_call.pm is missing /usr/local/cpanel/base/resetpass.cgi in its _allowed_parents which prevents the password reset from working.
[2026-03-04 15:48:57 +0000] warn [resetpass] The system failed to change the password for the user: Cpanel::Exception::AdminBinError/(XID tntddt) Parent check method: /usr/local/cpanel/cpanel,/usr/local/cpanel/uapi,/usr/local/cpanel/whostmgr/bin/xml-api,/usr/local/cpanel/libexec/queueprocd,/usr/local/cpanel/cpsrvd,/usr/local/cpanel/cpanel-email,/usr/local/cpanel/bin/update_quota_cache,/usr/local/cpanel/whostmgr/bin/whostmgr5, caller: /usr/local/cpanel/base/resetpass.cgi is not allowed at /usr/local/cpanel/Cpanel/AdminBin/Call.pm line 218.
We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-51851. Follow this article to receive an email notification when a solution is published in the product.
Workaround
As a temporary workaround, you can enable AdminBin from WHM Tweak Settings
- Log in to your WHM server as the
rootuser. - Navigate to Home / Server Configuration / Tweak Settings.
- Search for Allow other applications to run the cPanel and admin binaries
- Select On.
- Save your changes
