Critical Privilege Escalation Vulnerability in MRTG Package
Summary
ALSA-2026:57600: Important: mrtg security update. Affects mrtg versions < 2.17.7-12.el9_8.1. Fixed in 2.17.7-12.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Multi Router Traffic Grapher (MRTG) is a widely used tool that monitors the traffic load on network connections. It generates HTML pages containing PNG images that visually represent this traffic in real-time. MRTG is essential for network administrators to ensure optimal performance and manage bandwidth effectively. However, a recent vulnerability has been identified that could allow local users to escalate their privileges.
Vulnerability Detail
The vulnerability arises from a symlink-following issue in the MRTG daemon, which allows local privilege escalation via manipulation of the PID file path. This flaw can be exploited by an attacker with local access to the system, potentially leading to unauthorized access to sensitive data or system control. The specific identifier for this vulnerability is CVE-2026-72694, which highlights its significance and the need for immediate attention.
How To Fix
Minimum fixed version
2.17.7-12.el9_8.1
This is the first release that contains the fix.
sudo dnf update mrtgTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the MRTG daemon or ensure that only trusted users have local access to the system until the package can be updated.
Conclusion
The MRTG package has a critical vulnerability that could allow local privilege escalation. It is essential for users to update to the latest patched version to mitigate this risk. Additionally, temporary workarounds can be implemented to protect systems until the update can be applied.
See every vulnerability recorded for mrtg →
FAQ
MRTG stands for Multi Router Traffic Grapher, a tool used to monitor network traffic.
The vulnerability allows local users to escalate their privileges through PID file path manipulation.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability.
Yes, the patched version of MRTG is 2.17.7-12.el9_8.1 or later.
If immediate updating is not possible, restrict access to the MRTG daemon as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for mrtg.
