CVE-2025-66431 | WebPros Plesk prior 18.0.73.5/18.0.74.2 on Linux Domain Creation symlink

A vulnerability labeled as critical has been found in WebPros Plesk on Linux. The impacted element is an unknown function of the component Domain Creation Handler. The manipulation results in symlink following.

This vulnerability is identified as CVE-2025-66431. The attack is only possible with local access. There is not any exploit available.

The affected component should be upgraded.