Privilege Escalation Vulnerability in Plesk by Plesk International

CVE-2026-68488

What is CVE-2026-68488?

A race condition in the Plesk Backup Manager can lead to an insecure symlink following, enabling local privilege escalation. This vulnerability allows an attacker to gain unauthorized root access by taking ownership of arbitrary files or directories. Proper safeguards against race conditions are essential to securing the application and preventing unauthorized privilege escalation.

References