Local Privilege Escalation in Nagios XI due to Improper Script Ownership

CVE-2025-34287

What is CVE-2025-34287?

Nagios XI prior to version 2024R2 is susceptible to a local privilege escalation vulnerability due to an improperly owned script, process_perfdata.pl. This script is executed by the nagios user, yet it is owned by the www-data user, which grants web server privileges. An attacker with access to the web server could modify this script, allowing them to execute arbitrary code with the privileges of the nagios user when the script runs. This vulnerability highlights critical issues associated with file ownership and permissions in web-facing applications.

References