Nagios XI Command Injection Vulnerability in WinRM Plugin Allowing Arbitrary Command Execution

A command injection vulnerability has been identified in the WinRM plugin of Nagios XI, affecting versions prior to 2024R2. This vulnerability arises from inadequate validation of user-supplied parameters, which allows authenticated administrators to inject shell metacharacters. These injections are executed with the same privileges as the Nagios XI web application user, potentially leading to unauthorized command execution on the underlying host operating system. Exploitation of this vulnerability could also be used to modify configurations, exfiltrate data, or disrupt monitoring operations.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the host operating system with the privileges of the Nagios XI web application user.

Remediation

Users can upgrade to Nagios XI version 2024R2 or later to address this vulnerability.