Nagios Log Server
Moderate fix1 remedy
cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 2024R1.3.1
Nagios Log Server Code Injection Vulnerability Leading to Remote Code Execution
Vulnerability
Patched
A code injection vulnerability allowing arbitrary code execution has been identified in Nagios Log Server versions prior to 2024R1.3.1. This vulnerability arises because malformed dashboard ID values are not adequately validated before being sent to an internal API. An attacker who supplies crafted dashboard ID values can manipulate the system to execute their own data, resulting in code execution within the Log Server process.
Impact
Exploitation of this vulnerability allows for arbitrary code execution in the context of the Log Server process.
Remediation
Users are advised to upgrade to Nagios Log Server version 2024R1.3.1 or above.
Added: Oct 30, 2025, 10:27 PM
Updated: Oct 30, 2025, 10:27 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
10.0exploitability
5.2remediation
7.7relevance
0.9threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.