CyberRota Analysis
AI-GeneratedNagios Core versions prior to 4.5.13 and Nagios XI versions before 2026R1.5 are susceptible to authenticated remote code execution due to custom-variable macro injection via the Nagios Remote Data Processor (NRDP). An attacker with NRDP access can exploit this vulnerability by injecting OS commands into shell-executed command lines, provided that a custom variable is defined and referenced in a non-default configuration. Organizations using these versions should prioritize patching to mitigate the risk of unauthorized command execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP). When a custom variable defined on a host, service, or contact is referenced in a shell-executed command line, an authenticated attacker with NRDP access can inject OS commands through the macro value. Exploitation requires a non-default configuration in which a custom variable is defined and referenced in a shell-executed command.