Vulnerability in Nagios Log Server
CVE-2025-34274
Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an insecure plugin, pipeline configuration injection, or a vulnerability in input parsing - the attacker could execute code with root privileges, resulting in full system compromise. The Logstash service has been altered to run as the lower-privileged 'nagios' user to reduce this risk associated with a network-facing service that can accept untrusted input or load third-party components.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.019 (79.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 79th percentile — 79.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.019 · newest: 0.019 · change: 0.000
Affected products
- Nagios Log Server — versions 0
- Nagios Log Server — versions 2024
Weakness classification (CWE)
References
- www.nagios.com/products/security/ (vendor-advisory, patch, Vendor Advisory)
- www.nagios.com/changelog/ (release-notes, Release Notes, patch)
- www.vulncheck.com/advisories/nagios-log-server-logstash-process-root-privileges (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2025-34274?
- CVE-2025-34274 is a critical-severity vulnerability in Nagios Log Server, classified under CWE-250. CVSS score: 9.8/10. Published 2025-10-30.
- How severe is CVE-2025-34274?
- Critical severity. CVSS v3 base score is 9.8 out of 10.