Local Privilege Escalation Vulnerability in Nagios Log Server by Nagios
CVE-2024-58273

8.5HIGH

Key Information:

Vendor

NagiOS

Status
Log Server
Vendor
CVE Published:
30 October 2025

What is CVE-2024-58273?

A vulnerability found in Nagios Log Server prior to version 2024R1.0.2 allows for local privilege escalation, enabling an attacker, who has command execution privileges as the Apache web user or the backend shell user, to elevate their access to root permissions on the host system. This could potentially allow an attacker to take full control of the affected server, posing significant security risks.

Affected Version(s)

Log Server 0 < 2024R1.0.2

References

https://www.nagios.com/products/security/#log-server
vendor-advisorypatch
https://www.nagios.com/changelog/#log-server-2024R1
release-notespatch
https://www.vulncheck.com/advisories/nagios-log-server-lp...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sarang Tumne
JSON
.
CVE-2024-58273 : Local Privilege Escalation Vulnerability in Nagios Log Server by Nagios