CVE-2020-28906: Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Pr...

Security readout for executives and security teams

This issue can let a low-privileged Nagios user alter files that root-run scripts load, potentially becoming root. It affects Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier. The business risk is highest where untrusted users have local or application-level access to the monitoring host. Exposure is likely limited to organizations running affected Nagios XI or Fusion versions where low-privileged users can access the system or modify relevant Nagios-managed files. Prioritize remediation if affected Nagios systems monitor critical infrastructure or allow multiple administrators. Root escalation on monitoring hosts can threaten credentials, telemetry integrity, and downstream operational trust. Mitigation focus: Inventory Nagios XI and Fusion versions across monitoring infrastructure.; Check Nagios change logs and vendor guidance for fixed releases.; Upgrade affected XI 5.7.5 or earlier and Fusion 4.1.8 or earlier..

Prepared

Jun 2, 2026, 19:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.