What is CVE-2025-34274?

CVE-2025-34274 is a critical-severity vulnerability in Nagios Log Server, classified under CWE-250. CVSS score: 9.8/10. Published 2025-10-30.

How severe is CVE-2025-34274?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Nagios Log Server

CVE-2025-34274

Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for exampl…

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nagios Log Server — versions 0
Nagios Log_server — versions 2024

Weakness classification (CWE)

CWE-250

References

disclosure@vulncheck.com (vendor-advisory, patch, Vendor Advisory)
disclosure@vulncheck.com (release-notes, Release Notes, patch)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2025-34274?: CVE-2025-34274 is a critical-severity vulnerability in Nagios Log Server, classified under CWE-250. CVSS score: 9.8/10. Published 2025-10-30.
How severe is CVE-2025-34274?: Critical severity. CVSS v3 base score is 9.8 out of 10.