CVE-2025-8432 – CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON

CVE ID : CVE-2025-8432

Published : Oct. 27, 2025, 10:15 a.m. | 29 minutes ago

Description : Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15.

Severity: 8.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…