Vulnerabilities

TI-2025-24455 CVE-2025-34323 · GHSA-m97c-3wp7-wp45

Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

LOW 39

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00348 Published 2025-11-17 Fixed in 2026R1.0.1 CWE-732

TI-2025-24454 CVE-2025-34322 · GHSA-qrg4-jqvv-5724

Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

MEDIUM 51

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.09242 Published 2025-11-17 Fixed in 2026R1.0.1 CWE-78

Vulnerabilities

Filters

Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries