CVE-2026-52817highCWE-88

CVE-2026-52817: falha de alta gravidade em Linuxfabrik monitoring-plugins

Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar monitoring-plugins+ Monitorar linuxfabrik-lib

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.2%
Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who already controls that monitoring account can supply the APT::Update::Pre-Invoke option to execute an arbitrary command while apt-get runs with root privileges, resulting in a root shell and complete compromise of the host. The vulnerable rule supports the check-plugins/deb-updates/deb-updates plugin, but it authorized arbitrary apt-get argument sequences rather than only the required apt-get update --quiet 2 command. This issue is fixed in version 5.1.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Linuxfabrik · monitoring-plugins
CVEs relacionadas — Linuxfabrik monitoring-plugins

No mesmo produto, das mais perigosas para as menos.

CVE-2026-67435MEDIUMlinuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirectEPSS 0.5%CVE-2026-67436HIGHLinuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* pluginsEPSS 0.4%CVE-2026-73973MEDIUMLinuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)EPSS 0.3%CVE-2026-55426HIGHlinuxfabrik-lib: Local privilege escalation using embedded commandEPSS 0.2%CVE-2026-53759LOWlinuxfabrik-lib: Insecure creation of SQLite databasesEPSS 0.2%CVE-2026-73974MEDIUMlinuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)EPSS 0.2%