Privilege Escalation Vulnerability in MRTG Package - Important Security Update
Summary
ALSA-2026:57596: Important: mrtg security update. Affects mrtg versions < 2.17.10-12.el10_2.1. Fixed in 2.17.10-12.el10_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Multi Router Traffic Grapher (MRTG) is a widely used tool that monitors the traffic load on network connections. It generates HTML pages with PNG images that visually represent traffic data in real-time. MRTG is essential for network administrators to analyze bandwidth usage and optimize network performance. However, a recent vulnerability has been identified that could allow local privilege escalation through improper handling of PID file paths.
Vulnerability Detail
The vulnerability, identified as CVE-2026-72694, arises from the MRTG daemon's ability to follow symlinks when changing ownership of files. This flaw allows an attacker with local access to manipulate the PID file path, potentially leading to unauthorized privilege escalation. The ramifications of this vulnerability can be severe, as it may enable an attacker to gain elevated permissions on the system, compromising its integrity and security.
How To Fix
Minimum fixed version
2.17.10-12.el10_2.1
This is the first release that contains the fix.
sudo dnf update mrtgTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the MRTG daemon or disable it until the package is updated. This can be done by stopping the service with the command:
sudo systemctl stop mrtg
However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The MRTG package has a critical vulnerability that allows local privilege escalation due to improper handling of PID file paths. It is crucial to update to the latest patched version to mitigate this risk. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for mrtg →
FAQ
MRTG stands for Multi Router Traffic Grapher, a tool used to monitor network traffic.
It allows local privilege escalation through improper handling of PID file paths in the MRTG daemon.
You can use Vulert's playground at Vulert Scanner to check for vulnerabilities without needing to sign up.
As a temporary measure, restrict access to the MRTG daemon or disable it until you can apply the update.
Detailed information can be found on the CVE page associated with CVE-2026-72694.
Related vulnerabilities
Recent vulnerabilities recorded for mrtg.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
