PT-2025-44546 · Nagios · Nagios Xi

Published 2025-10-30 · Updated 2025-10-30 · CVE-2018-25123

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.5.7

Description The MRTG graphing component contains a flaw where MRTG-related processes and scripts are executed with excessive privileges. This allows a local attacker with limited system access to gain elevated privileges by abusing writable resources or file and command execution paths.

Recommendations Update to version 5.5.7 or later.

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2018-25123

Affected Products

Nagios Xi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25123 · Security Note
• https://osv.dev/vulnerability/CVE-2018-25123 · Vendor Advisory
• https://vulncheck.com/advisories/nagios-xi-privilege-escalation-via-mrtg-graphing-component · Note
• https://nagios.com/changelog/nagios-xi · Note