Local Privilege Escalation Vulnerability in MRTG Package
Summary
RLSA-2026:65832: Important: mrtg security update. Affects mrtg versions < 0:2.17.7-1.el8_10.1. Fixed in 0:2.17.7-1.el8_10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Multi Router Traffic Grapher (MRTG) is a tool used for monitoring the traffic load on network connections. It generates HTML pages containing PNG images that visually represent traffic data in real-time. MRTG is widely utilized in network management due to its ability to provide insightful traffic analysis. However, it is susceptible to a security flaw that can lead to local privilege escalation.
Vulnerability Detail
The vulnerability identified as CVE-2026-72694 allows local privilege escalation through symlink-following chown via PID file path manipulation in the MRTG daemon. This flaw can be exploited by a local user to gain elevated privileges, potentially compromising system integrity and security. The CVSS score for this vulnerability is 7.1, indicating a high severity level.
How To Fix
Minimum fixed version
0:2.17.7-1.el8_10.1
This is the first release that contains the fix.
sudo dnf update mrtgTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the MRTG daemon and ensure that only trusted users can execute it. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The MRTG package has a significant vulnerability that can lead to local privilege escalation. It is crucial to update to the latest patched version to ensure system security. Additionally, users should consider implementing workarounds until the update can be applied.
See every vulnerability recorded for mrtg →
FAQ
MRTG stands for Multi Router Traffic Grapher, a tool used for monitoring network traffic.
It allows local users to escalate privileges via PID file path manipulation in the MRTG daemon.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for this vulnerability is 7.1, indicating a high severity level.
You can update the MRTG package by running 'sudo dnf update mrtg' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for mrtg.
