CVE-2026-52817

Name of the Vulnerable Software and Affected Versions monitoring-plugins (affected versions not specified)

Description An issue exists in the Debian.sudoers file where the apt-get command is permitted for the nagios user without enforcing specific arguments. This allows a user who has compromised the nagios account to perform a local privilege escalation by executing arbitrary arguments, such as using the APT::Update::Pre-Invoke option to spawn a root shell.

Recommendations Restrict the sudoers configuration to allow only the specific arguments required for the apt-get command, such as /usr/bin/apt-get update --quiet 2, instead of allowing the command to be run with arbitrary arguments.