Vulnerability · Published Dec 16, 2025 · Assigned by VulnCheck
CVE-2025-34288Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo
High 8.6
In plain English
A high-severity incorrect permission assignment in Nagios XI from Nagios Enterprises. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 79% of all known vulnerabilities).
Official description
Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nagios Enterprises | Nagios XI | 0 – before 2026R1.1 |
Weakness: CWE-732 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://www.nagios.com/changelog/nagios-xi/2026r1-1/ release-notes, patch
- https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-writable-php-include-executed-with-sudo third-party-advisory