GHSA-jf24-8g2h-2wg7: LibreNMS Vulnerable to Remote Code Execution via AboutController
A Remote Code Execution (RCE) vulnerability exists in LibreNMS 26.3.1 through the AboutController. An authenticated administrator can manipulate the snmpget configuration parameter to execute arbitrary system commands. When the /about endpoint is accessed, the application executes the configured binary path via shell_exec() without proper validation. This vulnerability leads to complete server compromise, allowing attackers to establish reverse shells, exfiltrate sensitive data, and maintain persistent access.
Severity: High (CVSS 7.2) Attack Vector: Network Privileges Required: High (Administrator) User Interaction: None Impact: Complete system compromise with web server privileges
| Category | Level | Description |
|---|---|---|
| Confidentiality | HIGH | Read config files, database credentials, SSH keys |
| Integrity | HIGH | Create webshells, backdoors, modify code |
| Availability | HIGH | Disrupt services, delete data, stop monitoring |
| Scope | CHANGED | Compromise extends beyond application to system |
References
Code Behaviors & Features
Detect and mitigate GHSA-jf24-8g2h-2wg7 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →