High · published January 5, 2026
⚡ A high-privilege user can sneak in custom commands, turning a backup setup into an unguarded treasure chest! Think of it like a restaurant chef who can change the recipe without supervision — if they decide to add something unexpected, it might ruin the entire dish! This vulnerability is alarming because an attacker with high privileges could execute arbitrary commands on the server. Imagine them taking over backups to access sensitive data or even wreaking havoc on system integrity. Absolutely devastating if left unaddressed!
Think of it like a restaurant chef who can change the recipe without supervision — if they decide to add something unexpected, it might ruin the entire dish! This OS Command Injection vulnerability in Centreon Infra Monitoring allows high-privilege users to concatenate custom instructions in the backup setup, leading to potential arbitrary command execution.
This vulnerability is alarming because an attacker with high privileges could execute arbitrary commands on the server. Imagine them taking over backups to access sensitive data or even wreaking havoc on system integrity. Absolutely devastating if left unaddressed! To fix this issue, ensure you upgrade to versions 25.10.2, 24.10.15, or 24.04.19. Additionally, review user privileges and restrict high-privilege access where unnecessary to minimize risk. You've got this! Patch those versions and tighten up your controls! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| centreon/centreon_web | ≥ 24.04.0, < 24.04.19 | 24.04.19 |
| centreon/centreon_web | ≥ 24.10.0, < 24.10.15 | 24.10.15 |
| centreon/centreon_web | ≥ 25.10.0, < 25.10.2 | 25.10.2 |