Critical Plesk Vulnerability Allows Plesk Users to Gain Root

Cybersecuritynews •Abinaya • December 15, 2025

A severe security vulnerability has been discovered in Plesk for Linux that could allow users to gain root access on affected servers. The flaw, tracked as CVE-2025-66430, exists within Plesk’s Password-Protected Directories feature and allows attackers to inject arbitrary data into Apache configuration files. The vulnerability stems from improper handling of user input within the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Plesk Vulnerability Enables Root Access for Users A critical vulnerability in Plesk for Linux, tracked as CVE-2025-66430, allows users to gain root access on affected servers. This flaw, found in the Password-Protected Directories feature, results from improper handling of user input, enabling attackers to inject arbitrary data into Apache configuration files. Web hosting providers and organizations using Plesk are at risk due to this security issue. 3 sources 54

Extracted Entities

CVEs (1)

CVE-2025-66430

Platforms (2)

Apache Linux