CVE-2025-34323: nagios log_server

Vulnerability summary

CVE-2025-34323 is a high (CVSS 8.5) vulnerability in nagios log_server. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 17-11-2025
   PublishedVulnerability first disclosed.
2. 14-05-2026
   Last modifiedVulnerability information updated.

Description

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to '/usr/local/nagioslogserver/scripts', while several scripts in this directory are owned by root and may be executed via sudo without a password. A local attacker running as 'www-data' can move one of these root-owned scripts to a backup name and create a replacement script with attacker-controlled content at the original path, then invoke it with sudo. This allows arbitrary commands to be executed with root privileges, providing full compromise of the underlying operating system.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.