High severity7.2NVD Advisory· Published Nov 3, 2025· Updated Jun 17, 2026
CVE-2024-13997
CVE-2024-13997
Description
Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actions outside the intended security scope of the application, resulting in full control of the operating system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- Nagios/XIv5Range: 0
<2024R1.1.3+ 7 more
- (no CPE)range: <2024R1.1.3
- cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*range: <2024
- cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*
- cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.nagios.com/products/security/nvdVendor Advisory
- www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-migrate-server-feature-to-root-on-hostnvdThird Party Advisory
- www.nagios.com/changelog/nagios-xi/nvdRelease Notes
News mentions
0No linked articles in our index yet.