Nagios XI versions prior to 2024R1.1.4 have a local file inclusion (LFI) vulnerability in the NagVis integration. Authenticated users can exploit this flaw by supplying crafted path values to cause the server to include local files, potentially exposing sensitive information from the host system.