CVE-2025-34277: Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID
Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly validated before being forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause the system to execute attacker-controlled data, leading to arbitrary code execution in the context of the Log Server process.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34277?
CVE-2025-34277 is categorized as a critical code injection vulnerability.
How do I fix CVE-2025-34277?
To remediate CVE-2025-34277, upgrade Nagios Log Server to version 2024R1.3.1 or later.
What versions of Nagios Log Server are affected by CVE-2025-34277?
CVE-2025-34277 affects all Nagios Log Server versions prior to 2024R1.3.1.
What can an attacker do with CVE-2025-34277?
An attacker exploiting CVE-2025-34277 can execute arbitrary code through malformed dashboard ID values.
How does CVE-2025-34277 impact system security?
CVE-2025-34277 compromises system security by allowing unauthorized code execution, potentially leading to full system control.