Nagios Log Server versions prior to 2024R1.3.2 have a privilege escalation vulnerability in the account email-change workflow. This flaw allows a user to set their email to an invalid value, causing inconsistent account state that can grant elevated privileges or bypass access controls.