PT-2025-42513 · Icinga 2+1 · Icinga 2+1

Published 2025-10-16 · Updated 2025-10-29 · CVE-2025-61909

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.10.0 through 2.15.0 Icinga 2 version 2.14.6 and earlier Icinga 2 version 2.13.12 and earlier

Description Icinga 2, an open source monitoring system, has an issue where the safe-reload script and logrotate configuration read the process ID (PID) from a file writable by the Icinga daemon user, but send signals as the root user. This allows the Icinga user to send signals to processes they would normally lack permission to control. The script is also used during systemctl reload icinga2.

Recommendations Update to Icinga 2 version 2.15.1. Update to Icinga 2 version 2.14.7. Update to Icinga 2 version 2.13.13.

Exploit

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-61909

GHSA-PG6G-G99V-MW46

OPENSUSE-SU-2025:15644-1

Affected Products

Debian

Icinga 2

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61909.json · Exploit
• https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46 · Vendor Advisory
• https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587 · Patch
• https://ubuntu.com/security/CVE-2025-61909 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61909 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61909 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-61909 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15644-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-61909 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61909 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-61909 · Vendor Advisory
• https://github.com/Icinga/icinga2/issues/10527 · Note
• https://t.me/CVEtracker/35127 · Telegram Post
• https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4 · Note
• https://suse.com/security/cve/CVE-2025-61909 · Note