CVE-2026-67436 affects Linuxfabrik monitoring-plugins (version 6.0.0 and earlier) used with Icinga, Nagios, and related monitoring systems. The redfish-* plugins improperly validate input by concatenating operator-supplied base URLs with response-supplied @odata.id links without sufficient sanitization. This allows a malicious or compromised Baseboard Management Controller (BMC) to redirect authenticated Redfish API requests, leading to the disclosure of sensitive authentication credentials such as X-Auth-Token or HTTP Basic credentials. The vulnerability arises from improper input validation (CWE-20) and results in information exposure (CWE-200) and unsafe redirect (CWE-918). No official patch or remediation level has been published as of the data provided.

Successful exploitation can lead to disclosure of authentication tokens or HTTP Basic credentials used in Redfish API requests. This could allow an attacker controlling or impersonating a BMC to redirect requests and gain unauthorized access to sensitive monitoring data or systems. The vulnerability impacts confidentiality and potentially the integrity of monitoring operations relying on these plugins.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when using the redfish-* plugins with untrusted or potentially compromised BMCs. Avoid using these plugins in environments where BMCs cannot be fully trusted. Monitor vendor channels for updates or patches addressing this issue.