CyberRota Analysis
AI-GeneratedLibreNMS versions prior to 1.65 are vulnerable to a command injection flaw in the /graph.php API endpoint, allowing remote authenticated attackers with normal privileges to execute arbitrary shell commands. This vulnerability poses a significant risk as it could lead to unauthorized access and manipulation of the system. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php API endpoint.