CVE-2024-13997 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host
An authenticated administrator can exploit the Migrate Server feature to gain root privileges on the underlying host, requiring an upgrade to Nagios XI.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-13997?
CVE-2024-13997 is a critical vulnerability in Nagios Nagios Xi, published on 3 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system.
Weakness: CWE-269
Which versions are affected by CVE-2024-13997?
It affects 1 product.
Products include Nagios Nagios Xi.
How do I fix CVE-2024-13997?
No fix has been published for CVE-2024-13997 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-13997 being exploited?
There is no known exploitation of CVE-2024-13997 in the wild and no public exploit code.
Other vulnerabilities in Nagios Nagios Xi
Sources
Also known as GHSA-5359-gfvc-c3p7.