CVE-2026-68488

A critical race condition in Plesk allows local attackers to exploit a Time-of-check Time-of-use (TOCTOU) vulnerability, enabling them to gain root privileges through arbitrary file or directory ownership takeover. This flaw poses a significant risk to any systems running Plesk, particularly those with multi-user environments. Organizations utilizing Plesk should prioritize immediate remediation to mitigate potential exploitation.