OS Command Injection in LibreNMS - #VU140838
Published: August 4, 2026
Vulnerability identifier: #VU140838
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary code.
The vulnerability exists due to improper neutralization of special elements used in an os command in the AboutController /about endpoint when executing the configured snmpget binary path via shell_exec(). A remote privileged user can modify the snmpget configuration to point to a malicious executable and access the /about endpoint to execute arbitrary code.
Exploitation requires administrator access to the web interface and the ability to place an executable file on the target system.
Affected software
LibreNMS
Remediation
Install security update from vendor's website.
LibreNMS - update to 26.5.0