PT-2025-44501 · Nagios Enterprises · Nagios Xi

Márk Rákóczi · Published 2025-10-30 · Updated 2025-10-30 · CVE-2024-14002

Positive Technologies · (AI Summary)

CVSS v4.0

7.1

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.1.4

Description Nagios XI is affected by a local file inclusion issue through its NagVis integration. An authenticated user can provide specially crafted path values, which may lead to the inclusion of local files and potential exposure of sensitive information from the host system.

Recommendations Update Nagios XI to version 2024R1.1.4 or later.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

BDU:2025-14536

CVE-2024-14002

Affected Products

Nagios Xi

References · 7

• https://nagios.com/changelog/nagios-xi · Patch
• https://nagios.com/products/security/#nagios-xi · Patch, Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-14002 · Security Note
• https://bdu.fstec.ru/vul/2025-14536 · Security Note
• https://vulncheck.com/advisories/nagios-xi-authenticated-local-file-inclusion-via-nagvis · Note
• https://twitter.com/CVEnew/status/1984015897082622094 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44501 · Note