Medium severity4.9NVD Advisory· Published Aug 22, 2024· Updated Jun 17, 2026

CVE-2024-7634

Description

NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.

Affected products

Nginx/NGINX Agentllm-fuzzy
osv-coords
pkg:bitnami/nginx-agent
Range: >= 2.17.0, < 2.37.0
F5/NGINX Agentv5
Range: 2.17.0

Patches

Vulnerability mechanics

References

my.f5.com/manage/s/article/K000140630nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000