PT-2025-51789 · Nagios Enterprises · Nagios Xi

Published 2025-12-16 · Updated 2025-12-24 · CVE-2025-34288

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2026R1.1

Description The software contains a flaw that allows for local privilege escalation. This is due to an unsafe interaction between sudo permissions and application file permissions. A maintenance script accessible to users can be executed as root via sudo, and includes a file writable by a lower-privileged user. An attacker with access to the application account can modify this file to introduce malicious code, which is then executed with root privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Recommendations Update to version 2026R1.1 or later.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-34288

Affected Products

Nagios Xi

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-34288 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34288 · Vendor Advisory
• https://nagios.com/changelog/nagios-xi/2026r1-1 · Patch
• https://t.me/cveNotify/146030 · Telegram Post
• https://vulncheck.com/advisories/nagios-xi-privilege-escalation-via-writable-php-include-executed-with-sudo · Note
• https://t.me/cveNotify/146794 · Telegram Post
• https://twitter.com/CVEnew/status/2001350857577902534 · Twitter Post
• https://t.me/CVEtracker/40016 · Telegram Post