Privilege Escalation in Nagios XI due to MRTG Graphing Component Vulnerability
CVE-2018-25123

8.5HIGH

Key Information:

Vendor

NagiOS

Status
Xi
Vendor
CVE Published:
30 October 2025

What is CVE-2018-25123?

Nagios XI prior to version 5.5.7 features a vulnerability within the MRTG graphing component that allows a local attacker with limited access to manipulate file and command execution paths. This exploitation can enable the attacker to execute actions with elevated privileges, compromising system integrity. Administrators are advised to upgrade to the latest version to mitigate this risk and safeguard their systems against potential abuse.

Affected Version(s)

XI 0 < 5.5.7

References

https://www.nagios.com/changelog/nagios-xi/
release-notespatch
https://www.vulncheck.com/advisories/nagios-xi-privilege-...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Sayk of Telekom Security
JSON
.
CVE-2018-25123 : Privilege Escalation in Nagios XI due to MRTG Graphing Component Vulnerability