CVE-2025-34135

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.4.2

Description Nagios XI versions prior to 2024R1.4.2 configure certain systemd unit files with overly permissive permissions. Specifically, the nagios.service unit possesses unnecessary executable permissions. These permissions can expand the local attack surface, potentially enabling unintended execution or facilitating abuse of service operations when combined with other weaknesses.

Recommendations Update Nagios XI to version 2024R1.4.2 or later.