Nagios XI Privilege Escalation Vulnerability in MRTG Component

A privilege escalation vulnerability has been identified in Nagios XI versions prior to 5.5.7, specifically within the MRTG graphing component. This vulnerability arises because MRTG-related processes and scripts are executed with excessive privileges. As a result, a local attacker with limited system access could exploit file and command execution paths, or writable resources, to gain elevated privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, with potential access to root privileges.

Remediation

Users can upgrade to Nagios XI version 5.5.7 or later to address this vulnerability.