Nagios XI versions prior to 2024R1.2 have a privilege escalation vulnerability involving NagVis configuration handling. An authenticated user can manipulate NagVis configuration data or exploit insufficient validation to gain elevated privileges on the system. The vulnerability has a high severity with a CVSS score of 8.8.