CVE-2026-67436: Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or compromised BMC to redirect authenticated Redfish requests and disclose X-Auth-Token or HTTP Basic credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-67436?
The severity of CVE-2026-67436 is high, with a CVSS score of 8.3.
How do I fix CVE-2026-67436?
To fix CVE-2026-67436, update to version 6.0.1 or later of the Linuxfabrik monitoring-plugins.
What type of vulnerability is CVE-2026-67436?
CVE-2026-67436 is a Server-Side Request Forgery (SSRF) vulnerability that can lead to unauthorized disclosure of auth tokens.
What systems are affected by CVE-2026-67436?
CVE-2026-67436 affects versions 6.0.0 and earlier of the Linuxfabrik monitoring-plugins.
What are the potential impacts of CVE-2026-67436?
The potential impacts of CVE-2026-67436 include unauthorized access to sensitive resources and information leakage.