PT-2025-44517 · Elastic+1 · Logstash+1

Published 2025-08-05 · Updated 2025-10-31 · CVE-2025-34274

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R2.0.3

Description The software runs its embedded Logstash process as the root user, leading to a situation where an attacker compromising the Logstash process could execute code with root privileges, potentially resulting in full system compromise. This could occur through exploiting insecure plugins, pipeline configuration injection, or vulnerabilities in input parsing. The Logstash service has been altered to run as the 'nagios' user to mitigate this risk.

Recommendations Update to version 2024R2.0.3 or later.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2026-00267

CVE-2025-34274

Affected Products

Logstash

Nagios Log Server

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-34274 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34274 · Vendor Advisory
• https://nagios.com/changelog/#log-server · Patch
• https://bdu.fstec.ru/vul/2026-00267 · Security Note
• https://twitter.com/VulmonFeeds/status/1984068090674503757 · Twitter Post
• https://twitter.com/CVEnew/status/1984012720132243558 · Twitter Post
• https://vulncheck.com/advisories/nagios-log-server-logstash-process-root-privileges · Note
• https://nagios.com/products/security/#log-server-2024R2 · Patch, Vendor Advisory
• https://t.me/CVEtracker/36239 · Telegram Post