EUVD-2026-50554Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because the attacker must control/compromise a monitored BMC to return a malicious link; PR:N as no privileges on the plugin itself; C:H for credential/token leak, I:L, A:N.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish-* plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or compromised BMC to redirect authenticated Redfish requests and disclose X-Auth-Token or HTTP Basic credentials.
AnalysisAI
Credential and authentication-token disclosure in Linuxfabrik monitoring-plugins (versions 6.0.0 and earlier) affects the redfish-* check plugins used with Icinga, Nagios, and compatible systems. The plugins build Redfish request URLs by blindly concatenating the operator-supplied base URL with @odata.id links returned in the BMC response, so a malicious or compromised BMC can redirect the plugin's authenticated follow-up requests to an attacker-controlled host and harvest the X-Auth-Token session token or HTTP Basic credentials sent with them. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the CVSS 4.0 base score is 8.3.
Technical ContextAI
Redfish is the DMTF standard REST/JSON management API exposed by server Baseboard Management Controllers (BMCs) such as iDRAC, iLO, and BMC/IPMI-successor interfaces. Redfish resources reference one another through @odata.id hyperlinks embedded in JSON responses. The affected Python plugins (redfish-ethernetinterfaces, redfish-firmwareinventory, redfish-logservices, redfish-managers, redfish-memory, and other redfish-* checks) followed those links by string-concatenating them onto the operator-configured base URL - e.g. f'{args.URL}{member["@odata.id"]}' - while attaching the operator's authentication credentials. Because the link value is fully attacker-controlled response data, an absolute or scheme/host-relative value can point the authenticated request at a different host. This maps to CWE-20 (Improper Input Validation): response-supplied navigation data is trusted to construct a security-sensitive request target without validation. The fix routes all link resolution through a new lib.redfish.build_url() helper that constrains the resulting URL to the intended host, closing the SSRF/credential-redirect path.
RemediationAI
Upgrade to a Linuxfabrik monitoring-plugins release that includes commit ffb0a81308cbfc018da857a89e0d07a67bf89fc3, in which the affected redfish-* plugins were bumped to internal version 2026070701 and now resolve @odata.id links via the validating lib.redfish.build_url() helper; a released patched version was fixed in the repository but the exact tagged release number is not stated in the provided data, so confirm the target version against advisory GHSA-96fx-pqc3-28xv (https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-96fx-pqc3-28xv). Until upgraded, compensating controls are: restrict the redfish-* checks to BMCs you fully control and trust and never point them at third-party or internet-exposed management endpoints; place the monitoring host and BMC management interfaces on an isolated management VLAN with egress filtering so the plugin cannot reach an attacker-controlled host (trade-off: requires network segmentation already in place); and where feasible use short-lived, least-privilege Redfish credentials per device so a leaked token has limited value and lifetime (trade-off: added credential-management overhead). These controls reduce but do not eliminate the credential-redirect risk, so patching is the durable fix.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today