Critical Remote Code Execution Vulnerability in LibreNMS Package
Summary
GHSA-7549-ggpq-22w8: Duplicate Advisory: LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write. Affects librenms/librenms versions < 26.3.0. Fixed in 26.3.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreNMS is an open-source network monitoring tool that provides a range of features for monitoring network devices and services. It allows users to visualize and manage their network infrastructure effectively. However, versions prior to 26.3.0 are vulnerable to a serious security flaw that can lead to remote code execution through improper handling of configuration settings.
Vulnerability Detail
The vulnerability arises from an authenticated remote code execution flaw in LibreNMS versions before 26.3.0. It can be exploited by an attacker with administrative privileges who can manipulate the Binary Locations configuration and the Netcommand feature. Successful exploitation may lead to the compromise of the underlying web server, allowing attackers to execute arbitrary code.
How To Fix
Minimum fixed version
26.3.0
This is the first release that contains the fix.
composer require librenms/librenms:26.3.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the administrative interface of LibreNMS to trusted IP addresses only, minimizing the risk of unauthorized access until the package can be updated.
Conclusion
The remote code execution vulnerability in LibreNMS poses a significant risk to users of versions prior to 26.3.0. It is crucial to update to the latest version to safeguard against potential exploitation. Additionally, utilizing tools like Vulert can enhance your security posture by providing real-time vulnerability monitoring.
See every vulnerability recorded for librenms/librenms →
FAQ
All versions of LibreNMS prior to 26.3.0 are affected by this vulnerability.
Exploitation can lead to remote code execution, allowing attackers to compromise the web server and potentially gain control over the entire system.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, you can restrict access to the administrative interface to trusted IP addresses to reduce the risk of unauthorized access.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just the composer.lock file, helping you stay informed about potential security issues.
Related vulnerabilities
Recent vulnerabilities recorded for librenms/librenms.
