Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-67433

Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration

Description

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration moved a predictable path from /tmp with os.rename() and allowed a local user controlling the plugin account to place a symlink that would be followed by sqlite3.connect() during a root-run check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linuxfabrik monitoring-plugins

  • 6.0.0affected

References