Panellicense

cPanel & WHM v138 hits RELEASE: Meridian, AI Assistant, Nova

cPanel & WHM v138 is now on the RELEASE tier, replacing Jupiter with the opt-in Meridian interface plus an AI Assistant, a Nova app builder, and MCP connections.

cPAll cPanel articlesNews & changelogs6 min readUpdated 2026-09-18
cpanelwhmrelease-notesmeridianai-assistantmcp
schema: TechArticleschema: FAQPageschema: BreadcrumbList

cPanel & WHM v138 has been promoted to the production RELEASE tier (current build 11.138.0.7), a few weeks after v136 sat there waiting for it. This is the biggest interface change cPanel has shipped in years — a new opt-in theme called Meridian, an embedded AI Assistant, an AI app builder called Nova, and native MCP support for connecting AI agents to WHM. None of it is a routine maintenance bump, so it's worth understanding what changes before it lands on a fleet you didn't plan to touch.

Meridian: an opt-in replacement for Jupiter

Meridian is a new cPanel theme, not a forced migration — Jupiter stays the default and users can switch between the two from their account. Where Jupiter organizes features by category (Files, Databases, Email…), Meridian regroups everything into six goal-based hubs:

HubWhat lives there
WebsitesDomains, site builders, WordPress, SSL
EmailAccounts, forwarders, filters, deliverability tools
FilesFile Manager, FTP, backups
DatabasesMySQL/MariaDB, phpMyAdmin
SecurityPassword policy, IP blocker, SSH access
PerformanceCaching, PHP versions, resource usage

A Dashboard surfaces required actions and suggested next steps instead of a static feature grid, and a Guided Setup flow walks a new user through domain, website, and email configuration in one pass — cPanel's own pitch is a live site in under 10 minutes. If you've already built documentation or support macros around Jupiter's layout, budget time to redo them for Meridian before you flip it on for customers, since the two themes don't share screenshots or menu paths.

AI Assistant and Nova

Two distinct AI features ship inside Meridian, and they solve different problems:

  • AI Assistant is a chat panel reachable from an "Ask AI" button in the bottom-right corner of every Meridian page. It answers plain-language questions about the account — "why is my mail bouncing," "how do I add a subdomain" — without leaving the interface.
  • Nova is further along the automation curve: it builds a working site or application from a conversational description rather than manual configuration, then the AI Assistant stays attached to that site afterward for contextual troubleshooting.

Both are gated behind a valid license — cPanel's AI tooling installs for licensed servers automatically rather than as a separate purchase, so there's no extra SKU to buy on top of your existing cPanel license. Whether that's appropriate to expose to end users on a shared server is a policy decision worth making deliberately rather than inheriting by default the day you upgrade.

MCP connections in WHM

v138 adds native Model Context Protocol (MCP) support: a WebPros Dashboard widget in the WHM header manages MCP key issuance for servers linked to a WebPros account, and end users manage their own AI agent connections from the avatar menu. In practice this means Claude, ChatGPT, or another MCP-aware agent can be authorized to act on a cPanel account's behalf — similar ground to what Plesk's MCP Server extension covers on the Plesk side, though the two implementations aren't compatible with each other.

Domain renaming

Outside the AI features, v138 adds the ability to rename a primary, addon, or alias domain in place, with custom DNS records and subdomains migrated automatically instead of requiring a delete-and-recreate. This has been a long-standing gap versus Plesk, which has supported in-place domain renaming for years — see the domain-handling differences covered in cPanel vs Plesk in 2026 for the rest of that comparison.

Should you upgrade now

RELEASE-tier promotion means v138 is feature-complete and has cleared cPanel's own testing bar, and servers on the RELEASE update tier will pick it up automatically within the usual staggered rollout window. There's no security reason to rush it — critical patches ship to every supported branch regardless of which major version you're on — so the deciding factor is whether you want Meridian, AI Assistant, and MCP access live on your fleet now versus after you've had time to review them internally. If you're not ready, pinning to v136 a little longer via update tier settings is a legitimate choice; v136 isn't EOL yet.

What is cPanel Meridian?+
Meridian is a new, opt-in cPanel theme introduced in v138 that reorganizes features into six goal-based hubs — Websites, Email, Files, Databases, Security, and Performance — instead of Jupiter's category-based layout. Jupiter remains the default; users switch between themes from their account.
Is cPanel Meridian replacing Jupiter?+
No. As of v138, Meridian is an alternative theme, not a replacement. Jupiter is still the default interface and both themes are supported side by side.
Does the cPanel AI Assistant cost extra?+
No separate SKU — the AI tooling installs automatically on licensed servers running v138. A current cPanel license is what gates access, the same as any other feature in the product.
What is Nova in cPanel 138?+
Nova is an AI app builder that creates a working site or application from a conversational description rather than manual configuration, with the AI Assistant remaining attached afterward for contextual help.
Is cPanel & WHM v138 on the RELEASE tier yet?+
Yes. As of this writing the RELEASE tier is on build 11.138.0.7, matching EDGE and CURRENT. STABLE is still one version behind on the v136 branch.
Can I rename a domain in cPanel without recreating it?+
Yes, starting in v138. Renaming a primary, addon, or alias domain now migrates its custom DNS records and subdomains automatically instead of requiring you to delete and recreate the domain.

Next steps

changelog
CVE-2026-33278: the cpanel-unbound DNSSEC RCE, and how to check for it
A critical Unbound DNSSEC validator bug shipped as cpanel-unbound puts remote code execution one malicious signed zone away, no login required. Patched builds and how to check exposure.
7 min read
changelog
CVE-2026-65643: patch the cPanel domain parking root vulnerability
CVE-2026-65643 lets an authenticated cPanel user with parked or addon-domain access create arbitrary server files and potentially execute code as root. Check the fixed builds and update now.
3 min read
changelog
CVE-2026-67401: the cPanel EmailTrack flaw that turns mail access into root
A SQL injection in cPanel's EmailTrack feature lets any account with mail privileges write files as root. Fixed builds, affected versions, and how to check your fleet.
7 min read
changelog
cPanel TSR-2026-09-08: prepare for the critical WHM patch
cPanel pre-announced a Targeted Security Release for 8 September 2026 fixing a critical cPanel & WHM vulnerability. Here is how to identify affected servers and apply the fix.
4 min read
changelog
CVE-2026-41940: the cPanel & WHM auth bypass, and how to check for it
A CRLF injection in cpsrvd session handling let unauthenticated attackers write user=root into their own session file. Patched versions, IOCs, and how to check if you were hit.
7 min read
how to
Change a cPanel WHM hostname without breaking license, mail, or SSL
A clean WHM hostname change takes 15 minutes if you do it in order. The mistakes that cost an afternoon — broken services SSL, license re-checks, mail HELO mismatches, and rDNS — all in one playbook.
8 min read
Switch in an afternoon

Switch from your current reseller — free.

We migrate active cPanel, Plesk, LiteSpeed and CloudLinux licenses from any reseller. We prorate the first month so you never pay twice, and your customers see zero downtime during the swap.