---
id: CVE-2025-34227
title: >-
  Nagios XI < 2026R1 is vulnerable to an authenticated command injection
  vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres
  Server, and Postgres Query wizards
summary: >-
  Nagios XI < 2026R1 is vulnerable to an authenticated command injection
  vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres
  Server, and Postgres Query wizards. It is possible to inject shell characters
  into argu…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: nagios
product: nagios_xi
affected:
  - nagios_xi <= 2026
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-34227'
references:
  - url: 'https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/'
    label: disclosure@vulncheck.com
  - url: 'https://www.nagios.com/changelog/'
    label: disclosure@vulncheck.com
  - url: 'https://www.nagios.com/products/security/'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/nagios-xi-config-wizard-auth-command-injection
    label: disclosure@vulncheck.com
tags:
  - nvd
  - exploit-available
epss: 0.24251
epssPercentile: 0.97815
exploits:
  github: 1
  githubRepos:
    - >-
      https://github.com/mcorybillington/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard
  checkedAt: '2026-10-12T14:51:08.507Z'
exploitAvailable: true
ingestedAt: '2026-10-12T14:50:33.995Z'
---

## Overview

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.

## Affected

- `nagios_xi <= 2026`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.