← Vulnerability feed

Vulnerability record · CVE-2025-34323 · published 17 November 2025

CVE-2025-34323: Nagios log server incorrect permission assignment vulnerability

Nagios · Log Server

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to '/usr/local/nagioslogserver/scripts', while several scripts in this directory are owned by root and may be executed via sudo without a password. A local attacker running as 'www-data' can move one of these root-owned scripts to a backup name and create a replacement script with attacker-controlled content at the original path, then invoke it with sudo. This allows arbitrary commands to be executed with root privileges, providing full compromise of the underlying operating system.

8.5 CVSS 4.0 High EPSS 0.33% · top 77.0% CWE-732 · Incorrect permission assignment
8.5CVSS 4.0 base score
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to '/usr/local/nagioslogserver/scripts', while several scripts in this directory are owned by root and may be executed via sudo without a password. A local attacker running as 'www-data' can move one of these root-owned scripts to a backup name and create a replacement script with attacker-controlled content at the original path, then invoke it with sudo. This allows arbitrary commands to be executed with root privileges, providing full compromise of the underlying operating system.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://theyhack.me/Rooting-Nagios-Log-Server/
https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/ Release Notes
https://www.nagios.com/products/security/#log-server Vendor Advisory
https://www.vulncheck.com/advisories/nagios-log-server-local-privilege-escalation-via-writable-scripts-and-sudo-rules Third Party Advisory

Track CVE-2025-34323 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.4CVE-2025-34277Nagios log server code injection vulnerabilityNagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated …EPSS 2.0%9.3CVE-2025-34274Nagios log server execution with unnecessary privileges vulnerabilityNagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash proces…EPSS 1.9%8.8CVE-2025-44823Nagios log server vulnerabilityNagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/sys…EPSS 16%8.7CVE-2025-34298Nagios log server vulnerabilityNagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change workflow. A user could set th…EPSS 0.66%8.7CVE-2025-34271Nagios log server cleartext transmission vulnerabilityNagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credentials from pe…EPSS 0.69%8.7CVE-2023-7322Nagios log server incorrect authorization vulnerabilityNagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevert…EPSS 1.00%8.6CVE-2025-34322Nagios log server os command injection vulnerabilityNagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries…EPSS 9.5%8.5CVE-2024-58273Nagios log server vulnerabilityNagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands …EPSS 0.26%

Source: NIST National Vulnerability Database (record CVE-2025-34323), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.