A permissions flaw in Acronis Backup’s cPanel/WHM plugin and Plesk extension lets a local user, such as a hosting customer, escalate to root or admin-level control on shared servers.