The linuxfabrik-lib Python modules and Linuxfabrik Monitoring Plugins prior to versions 6.1.0 and 7.0.0 respectively contain a path traversal vulnerability (CWE-22) due to improper limitation of pathname to a restricted directory. The lib.lftest.test() function treated elements of a --test CSV argument as filesystem paths and returned file contents without confinement. Since the --test argument is accepted by sudo-authorized plugins, an attacker controlling the nagios or icinga account could exploit this to disclose contents of any root-readable file. Approximately 22 plugins exposed filtered content or file existence checks through this helper, and two plugins had direct read paths bypassing the helper. The fix confines fixture reads to the plugin's unit-test directory and routes bypasses through the helper. These fixes are included in linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0.

An attacker with control over the nagios or icinga account and sudo-authorized plugin execution can read arbitrary root-readable files on the system. This leads to confidentiality breaches of sensitive information. The vulnerability does not impact integrity or availability. No known exploits in the wild have been reported.

The vulnerability is fixed in linuxfabrik-lib version 6.1.0 and Linuxfabrik Monitoring Plugins version 7.0.0. Users should upgrade to these versions or later to remediate the issue. No additional mitigation is required once updated.