An authenticated SQL injection flaw was found in LibreNMS 1.65 that lets a regular authenticated user exploit the sort parameter in the /ajax_table.php API to retrieve the entire database content. The vulnerability is a classic injection of SQL statements, which can expose all stored network asset data, configuration details, log entries, and other sensitive information.

LibreNMS version 1.65, before the 1.65.1 release, is affected. The platform is an open‑source network monitoring tool; no other vendor or product line is specified. Versions subsequent to 1.65.1 are not listed as impacted.

Because the flaw requires only normal authenticated access, any user that can log into the web interface can send a crafted request to the vulnerable endpoint. The CVSS score is not provided, the EPSS score is not available, and the vulnerability is not in CISA’s KEV catalog, but the possible full database disclosure represents a high risk. No publicly known exploit was reported at the time of disclosure; the attack vector is inferred to be a crafted HTTP request to /ajax_table.php with user‑controlled sort input.