Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis has disclosed a high-severity local privilege escalation (LPE) vulnerability affecting its backup plugin for cPanel, WebHost Manager (WHM), and Plesk on Linux systems. The flaw is reported to be actively exploited in the wild, raising urgency for affected users to apply patches. The vulnerability allows local attackers to escalate privileges on Linux-based hosting environments. Acronis has issued a warning to users of the affected plugin to update immediately. The issue highlights ongoing risks in third-party backup and hosting management integrations. Hosting providers using Acronis backup solutions with cPanel or Plesk are particularly at risk. No specific CVE identifier was mentioned in the available content snippet.