Critical Plesk Vulnerability Allows Users to Gain Root

Gbhackers •Divya • December 15, 2025

A critical security vulnerability has been discovered in Plesk, a widely used web hosting control panel, that enables unauthorised users to escalate privileges and gain root-level access to affected systems. This flaw poses a significant threat to web hosting providers and organisations that rely on Plesk for server management. Vulnerability Overview The vulnerability allows malicious […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Plesk Vulnerability Enables Root Access for Users A critical vulnerability in Plesk for Linux, tracked as CVE-2025-66430, allows users to gain root access on affected servers. This flaw, found in the Password-Protected Directories feature, results from improper handling of user input, enabling attackers to inject arbitrary data into Apache configuration files. Web hosting providers and organizations using Plesk are at risk due to this security issue. 3 sources 54

Extracted Entities

Platforms (1)

Plesk