CVE-2025-61909

Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.10.0 through 2.15.0 Icinga 2 version 2.14.6 and earlier Icinga 2 version 2.13.12 and earlier

Description Icinga 2, an open source monitoring system, has an issue where the safe-reload script and logrotate configuration read the process ID (PID) from a file writable by the Icinga daemon user, but send signals as the root user. This allows the Icinga user to send signals to processes they would normally lack permission to control. The script is also used during systemctl reload icinga2.

Recommendations Update to Icinga 2 version 2.15.1. Update to Icinga 2 version 2.14.7. Update to Icinga 2 version 2.13.13.