High severity8.4OSV Advisory· Published Oct 27, 2025· Updated Apr 15, 2026

CVE-2025-8432

Description

Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Centreon/CentreonOSV2 versions
centreon-awie-23.10.0, centreon-awie-24.04.0, centreon-awie-24.10.0, …+ 1 more
- (no CPE)range: centreon-awie-23.10.0, centreon-awie-24.04.0, centreon-awie-24.10.0, …
- (no CPE)range: >=24.10.0 <24.10.6, >=24.04.0 <24.04.9, >=23.10.0 <23.10.15

Patches

Vulnerability mechanics

References

github.com/centreon/centreon/releasesnvd
thewatch.centreon.com/latest-security-bulletins-64/cve-2025-8432-centreon-mbi-high-severity-5180nvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000