https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:10:42.896969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-67433 CVE-2026-67433 — Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration 2026-10-09T02:10:42.913499+00:00

Affected: Linuxfabrik monitoring-plugins

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration moved a predictable path from /tmp with os.rename() and allowed a local user controlling the plugin account to place a symlink that would be followed by sqlite3.connect() during a root-run check.