Critical Plesk Vulnerability Enables Root Access for Users

A critical vulnerability in Plesk for Linux, tracked as CVE-2025-66430, allows users to gain root access on affected servers. This flaw, found in the Password-Protected Directories feature, results from improper handling of user input, enabling attackers to inject arbitrary data into Apache configuration files. Web hosting providers and organizations using Plesk are at risk due to this security issue.