CVE-2024-14009 Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile
An authenticated administrator can exploit unsafe profile handling in Nagios XI to execute arbitrary commands and gain root privileges on the server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-14009?
CVE-2024-14009 is a critical vulnerability in Nagios Nagios Xi, published on 30 Oct 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component. The System Profile feature is an administrative diagnostic/configuration capability. Due to improper access controls and unsafe handling of exported/imported profile data and operations, an authenticated administrator could exploit this vulnerability to execute actions on the underlying XI host outside the application's security scope. Successful exploitation may allow an administrator to obtain root privileges on the XI server.
Weakness: CWE-269
Which versions are affected by CVE-2024-14009?
It affects 1 product.
Products include Nagios Nagios Xi.
How do I fix CVE-2024-14009?
No fix has been published for CVE-2024-14009 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-14009 being exploited?
There is no known exploitation of CVE-2024-14009 in the wild and no public exploit code.
Other vulnerabilities in Nagios Nagios Xi
Sources
Also known as GHSA-wfgh-85mw-92mc.