CNNVD-202512-105 Information

CNNVD ID

CNNVD-202512-105

CVE-2025-49642

  • CNNVD Published: 2025-12-01

Description (Chinese)

Zabbix Agent是拉脱维亚Zabbix公司的一个Zabbix中的组件。 Zabbix Agent存在安全漏洞,该漏洞源于本地用户可通过写入/home/cecuser目录劫持库加载过程。

Description (English)

Zabbix Agent is part of a Zabbix company in Latvia. Zabix Agent has a security loophole, which stems from the process by which local users can hijack the vault through writing/home/cecuser catalogues.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Zabbix

Published

2025-12-01

Last Modified

2026-02-24

References

https://support.zabbix.com/browse/ZBX-27283 https://access.redhat.com/security/cve/cve-2025-49642 https://vigilance.fr/vulnerability/Zabbix-code-execution-via-AIX-Agents-48912

Patch

https://www.zabbix.com/download

Share on: