CVE-2011-10035 Nagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPE
Local attackers can exploit race conditions in crontab installation scripts to execute arbitrary commands with elevated privileges on Nagios XI servers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-10035?
CVE-2011-10035 is a high-severity vulnerability in Nagios Nagios Xi, published on 30 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update system crontab entries. Due to time-of-check/time-of-use race conditions and missing synchronization or final-path validation, a local low-privileged user could manipulate filesystem state during crontab installation to influence the files or commands executed with elevated privileges, resulting in execution with higher privileges.
Weakness: CWE-367
Which versions are affected by CVE-2011-10035?
It affects 1 product.
Products include Nagios Nagios Xi.
How do I fix CVE-2011-10035?
No fix has been published for CVE-2011-10035 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-10035 being exploited?
There is no known exploitation of CVE-2011-10035 in the wild and no public exploit code.
Other vulnerabilities in Nagios Nagios Xi
Sources
Also known as GHSA-rmp9-wcq5-wff8.