Plesk Obsidian 18.0.82 Is Now Available

Plesk Obsidian 18.0.82 is here, and the thread running through it is AI that does more than answer questions.

The AI Support Assistant can now carry out work on your server rather than only describe it, with your approval on every action. Nova, the WebPros AI App Builder, becomes something hosting partners can offer their own customers. Around those, the Python extension has been updated, the Node.js Toolkit has been redesigned, and customers can now be given access to the REST API.

Below is a summary of what is included. The complete list of changes is in the release notes.

A More Capable AI Support Assistant

Until now the AI Support Assistant answered questions. It could tell you where a setting lived or how to resolve a configuration problem, and you went and did it yourself.

In 18.0.82 it can do the work. On servers connected to the WebPros Dashboard MCP server, the assistant can make calls to Plesk utilities while you are talking to it. You approve each call, or a batch of calls, before anything runs. The assistant proposes, you decide, and nothing happens on the server without that step.

Available to resellers and customers

The assistant is no longer limited to administrators. You can now make it available to resellers and customers as well, and when it is talking to one of them it is aware of their role and only gives answers they are able to act on.

Enable it through panel.ini:

[copilot]
chat.enabled = true
chat.enabledTypes = admin, reseller, client, adminAlias

To make the assistant available to some roles but not others, remove the roles you do not want from the chat.enabledTypes line.

A clearer picture when impersonating

If you are talking to the assistant while impersonating another role, for example an administrator logged in as a customer, the interface now shows a clear warning that the conversation will be visible to the user being impersonated.

Both the AI Support Assistant and Plesk MCP now also have promo cards on the Home dashboard, so the features are easier to find and switch on.

Nova on Plesk

Hosting partners can now offer Nova, the WebPros AI App Builder, to their customers.

Customers open Nova from their domain in Plesk, build a website or an application with AI, and publish it to that domain in a single click. The work happens in the same place the domain is already managed.

To offer Nova, add the “Nova on Plesk” additional licence key to your Plesk licence, then add a Nova plan to your service plans.

The Python Extension, Updated

The Python extension lets you host Python applications in Plesk without touching the command line. You can enable Python support for a domain in a few clicks, create a virtual environment and install dependencies from the interface, set environment variables and store sensitive values as encrypted secrets, and restart an application in one click. Applications run as WSGI applications through Phusion Passenger, and the web server configuration is created for you.

18.0.82 adds the ability to scan a server for Python applications that are already running, so existing projects can be brought under management in Plesk without being rebuilt.

Access is governed by the “Python support management” permission in service plans and subscriptions, and the extension requires Plesk Obsidian 18.0.79 or later.

A Redesigned Node.js Toolkit

The Node.js Toolkit interface has been reworked, continuing the Node.js work that began in 18.0.81.

The Dashboard tab now shows Status and Application Type for each application, with clearer controls for starting, stopping and restarting. Environment variables can be edited in bulk and stored as secrets. A Git repository URL can be used as the source for an application’s content.

The addition most people have been waiting for is per-application logs, described in the release notes as one of the most requested Node.js features. You will find them behind the “Logs” button on the Dashboard tab of the Node.js page.

There is also a full set of CLI commands in the plesk ext nodejs --<command> format, covering listing applications, changing settings, managing dependencies and environment variables, deploying from Git, and starting or stopping applications. Most are available in the XML API as well. Auto-configuration, which arrived in 18.0.81, can now be run from the CLI with a dry run option:

plesk ext nodejs --auto-configure -domain <domain> -dry-run

Feature Improvements

REST API access for customers

A new “Ability to use REST API” permission has been added to service plans, and customers can now issue their own API secret keys through POST /api/v2/auth/keys. More than ten REST API bugs have been fixed and the API specification has been improved.

Backup activity in the Action Log

Creating, restoring and removing Plesk backups is now recorded in the Action Log, whether the action came from the interface, the CLI, the REST API or a scheduled task. Removals triggered by the rotation mechanism are logged too.

Certificates

ACME External Account Binding information is now preserved during migration, so certificates issued by authorities that require it renew correctly on the new server. Domains with no web hosting can now be secured with a wildcard certificate using DNS validation in SSL It!, from both the interface and the CLI. Installing SSL It! now also installs the Sectigo and DigiCert extensions.

New upgrade paths

Three in-place upgrade routes are now publicly available: AlmaLinux 9 to AlmaLinux 10, CloudLinux 8 to CloudLinux 9, and a script to automate the dist-upgrade from Ubuntu 24 to Ubuntu 26.

Other improvements

• Password reset request notification templates are now editable.
• Panel.ini Editor can edit parameter values directly from the Viewer tab.
• Performance Booster supports MariaDB 12.3.
• On Windows, the Web Deploy publishing host URL can be changed server-wide or per domain.
• The “Log in with WebPros Account” button can be hidden while keeping the WebPros Account section in My Profile, including the MCP connection.

Deprecated and Removed Items

XML-RPC versions earlier than 1.6.9.1 have been removed

As announced in both 18.0.80 and 18.0.81, support for XML-RPC protocol versions earlier than 1.6.9.1 has now been removed. Requests using an earlier protocol version will return an error.

If you have integrations still using an older version, update them to comply with the 1.6.9.1 specification. It is possible to temporarily re-enable support for the older versions, although this is not secure and we do not recommend it:

[api]
oldVersionsSupported = true

Debian 11

Support for Debian 11 was dropped in 18.0.81. From 18.0.82 it is removed from the list of supported operating systems and new releases are no longer published for it. Dist-upgrade to Debian 12 using the dist-upgrade tool, or migrate hosted domains to a server running a supported operating system.

Social Login

The Social Login extension is deprecated and will be removed in Plesk Obsidian 18.0.84 in January 2027. After that it will no longer be possible to log in to Plesk with a Google, Facebook or GitHub account, or with a passkey. Plesk usernames and passwords, and logging in with a WebPros Account, are unaffected.

Plesk Mobile

The Plesk Mobile apps and the Plesk Mobile Center extension are deprecated and no longer available for new installations. In 18.0.84 the extension will be removed during upgrade and the apps will lose their server management features.

Horde

Horde Webmail has been deprecated since 18.0.64 and receives no further updates or security fixes. On servers where it is installed, a warning is now shown to the administrator at first login after every update.

Important Fixes and Stability Improvements

v18.0.82 includes a substantial number of fixes across the Domains page, the Action Log, backups, MFA, the Composer and Repair Kit extensions, mail authentication, web statistics, and a cluster of fixes to SSL It! and ACME certificate renewal, on both Linux and Windows.

For the full list, see the release notes.

Updated Third-Party Components

This release updates a number of third-party components across Linux and Windows environments, including ModSecurity, the OWASP ModSecurity Core Rule Set, Postfix, courier-authlib, the ASP.NET Core Runtime, Node.js, Python, Git for Windows, OpenSSL and SQLite. A separate set of PHP updates was published the same day.

For the full list of updated versions, see the release notes.

Update Recommended

Keeping your servers up to date ensures the highest levels of security, stability and performance available.

Plesk Obsidian v18.0.82 is available now through the Plesk Installer. Unsure of how to update? Steps are available in our update guide.

To learn more about this release and review all of the details, visit the release notes.