CVE-2025-49642
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-01

Last updated on: 2026-04-29

Assigner: Zabbix

Description
Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-01
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2025-12-01
EPSS Evaluated
2026-06-15
NVD
CVE-2025-49642
EUVD
EUVD-2025-199986
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
zabbix zabbix_agent 4.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves library loading on AIX Zabbix Agent builds being hijacked by local users who have write access to the /home/cecuser directory. Essentially, a local user with the ability to write to that directory can manipulate the libraries loaded by the Zabbix Agent, potentially causing it to execute malicious code.

Impact Analysis

The impact of this vulnerability is that a local user with write access to the /home/cecuser directory can hijack the library loading process of the Zabbix Agent, which may lead to privilege escalation or execution of unauthorized code. This could compromise the integrity and security of the system where the Zabbix Agent is running.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-49642. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart