CVE-2026-73974

Received Received - Intake

Information Disclosure in Linuxfabrik-lib and Monitoring Plugins

Publication date: 2026-08-18

Last updated on: 2026-08-19

Assigner: GitHub, Inc.

Description

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins. Prior to linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0, lib.lftest.test() treated the first or second element of a --test CSV argument as a filesystem path and returned the file contents as simulated standard output or standard error without path confinement. The hidden but production-accessible --test argument was accepted by sudo-authorized plugins, so an attacker controlling the nagios or icinga account could use check-plugins/deb-updates/deb-updates with its default QUERY=1 to disclose every line of a root-readable file. Approximately 22 other plugins exposed filtered content or a root file existence and readability oracle through the same helper, while check-plugins/network-bonding/network-bonding and check-plugins/openstack-swift-stat/openstack-swift-stat had direct read paths that bypassed the helper. The library fix confines fixture reads to the invoking plugin's unit-test directory and refuses unsafe anchors, and the plugin fix routes the two bypasses through that helper. These issues are fixed in linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-19

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-73974

Affected Vendors & Products

Vendor	Product	Version / Range
linuxfabrik	linuxfabrik-lib	6.1.0
linuxfabrik	linuxfabrik_monitoring_plugins	7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability involves the linuxfabrik-lib library and Linuxfabrik Monitoring Plugins. Prior to versions 6.1.0 and 7.0.0 respectively, a hidden --test argument in plugins could be exploited to read arbitrary root-accessible files. The lib.lftest.test() function treated CSV arguments as file paths and returned their contents without proper path restrictions.

Detection Guidance

To detect this vulnerability, check if your system uses vulnerable versions of linuxfabrik-lib (before 6.1.0) or Linuxfabrik Monitoring Plugins (before 7.0.0). Inspect installed versions with commands like 'pip show linuxfabrik-lib' or 'dpkg -l | grep linuxfabrik-monitoring-plugins'. If vulnerable, update to patched versions immediately.

Impact Analysis

An attacker with access to the nagios or icinga account could exploit this to read sensitive files on the system, including configuration files or other root-readable data. This could lead to information disclosure, privilege escalation, or further attacks if credentials or secrets are exposed.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's requirements for safeguarding protected health information. Compliance may be compromised if confidential data is exposed through file disclosure.

Mitigation Strategies

Update linuxfabrik-lib to version 6.1.0 or later and Linuxfabrik Monitoring Plugins to version 7.0.0 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-73974. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70