Broken Function Level Authorization in Centreon’s postcommand.php allows an authenticated user who is not an administrator to execute poller postrestart commands. This flaw can enable the user to affect poller configuration or operations, potentially leading to service disruption or unauthorized configuration changes. The weakness is a function‑level authorization failure (CWE‑863).

The vulnerable component is part of the Centreon Centreon product. No specific version range is listed, so any release that includes postcommand.php without the fix is potentially affected.

The CVSS score of 5.4 indicates moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited known exploitation. The attack requires an authenticated non‑admin account, so the vector is likely internal or privileged. Nonetheless, the ability to execute privileged commands warrants timely remediation.