Critical Plesk Flaw Allows Users to Gain Root-Level Access

Cyberpress • December 15, 2025

Share: View original

A critical security vulnerability has been discovered in Plesk, a widely used web hosting control panel trusted by thousands of hosting providers ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Plesk Vulnerability Enables Root Access for Users A critical vulnerability in Plesk for Linux, tracked as CVE-2025-66430, allows users to gain root access on affected servers. This flaw, found in the Password-Protected Directories feature, results from improper handling of user input, enabling attackers to inject arbitrary data into Apache configuration files. Web hosting providers and organizations using Plesk are at risk due to this security issue. 3 sources 54

Extracted Entities

Platforms (1)