PT-2025-47192 · Nagios · Nagios Log Server

Published 2025-11-17 · Updated 2025-11-27 · CVE-2025-34323

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2026R1.0.1

Description Nagios Log Server versions prior to 2026R1.0.1 are susceptible to local privilege escalation. This is due to a combination of a misconfigured sudo setup and group-writable application directories. The www-data user is part of the nagios group, which has write access to /usr/local/nagioslogserver/scripts. Several scripts within this directory are owned by root and can be executed via sudo without a password. A local attacker with www-data privileges can replace root-owned scripts with malicious scripts and then execute them using sudo, resulting in arbitrary code execution with root privileges and full system compromise.

Recommendations Update Nagios Log Server to version 2026R1.0.1 or later.

Exploit

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2025-14542

CVE-2025-34323

Affected Products

Nagios Log Server

References · 9

• 🔥 https://theyhack.me/Rooting-Nagios-Log-Server · Exploit
• https://osv.dev/vulnerability/CVE-2025-34323 · Vendor Advisory
• https://nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-34323 · Security Note
• https://bdu.fstec.ru/vul/2025-14542 · Security Note
• https://vulncheck.com/advisories/nagios-log-server-local-privilege-escalation-via-writable-scripts-and-sudo-rules · Note
• https://twitter.com/CCBalert/status/1994092795506630657 · Twitter Post
• https://twitter.com/CVEnew/status/1990485786773315595 · Twitter Post
• https://nagios.com/products/security/#log-server · Patch, Vendor Advisory