CVE-2025-34323 is a local privilege escalation vulnerability in Nagios Log Server versions before 2026R1.0.1. It arises from a sudo misconfiguration combined with group-writable application directories. Specifically, the 'www-data' user belongs to the 'nagios' group, which has write permissions on '/usr/local/nagioslogserver/scripts'. Several scripts in this directory are owned by root and can be run via sudo without requiring a password. An attacker with 'www-data' privileges can rename an original root-owned script and replace it with a malicious script at the same path, then execute it with sudo to gain root-level command execution and full control over the operating system.

Successful exploitation allows a local attacker with 'www-data' privileges to execute arbitrary commands as root, resulting in complete compromise of the underlying operating system. This elevates the attacker’s privileges from a limited user to full administrative control, posing a critical security risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict write permissions on the '/usr/local/nagioslogserver/scripts' directory to prevent unauthorized modifications. Review sudoers configurations to ensure that scripts cannot be executed without appropriate authentication. Monitor for local unauthorized access and consider limiting membership of the 'nagios' group. Avoid running Nagios Log Server versions prior to 2026R1.0.1 in untrusted environments.