CVE-2025-34288 affects Nagios Enterprises Nagios XI versions before 2026R1.1. It arises from an unsafe interaction between sudo permissions and application file permissions, specifically an application file included by a maintenance script is writable by lower-privileged users. Because the script runs as root via sudo, a local attacker with access to the application account can modify this file to execute arbitrary code with root privileges, resulting in local privilege escalation. The vulnerability is categorized under CWE-732 (Incorrect Permission Assignment for Critical Resource).

Successful exploitation allows a local attacker with access to the application account to execute arbitrary code as the root user, leading to full system compromise. This elevates privileges from a lower-privileged user to root, which can severely impact system integrity and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Nagios Enterprises advisories for updates. Until a fix is available, restrict local access to trusted users only and review sudo permissions and file permissions related to the maintenance script to mitigate risk.