Nagios XI versions prior to 2024R1.0.1 have a privilege escalation vulnerability in the System Profile component. This component is used for administrative diagnostics and configuration. Due to improper access controls and unsafe handling of profile data, an authenticated administrator can perform actions beyond the intended security scope, potentially gaining root privileges on the server.