CVE-2025-49642 - Vulnerability Details - OpenCVE

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zabbix	Zabbix-agent

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Zabbix	Zabbix-agent

Advisories

No advisories yet.

Fixes

Solution

Update AIX Zabbix Agent packages to their respective fixed versions.

Workaround

Make sure /home/cecuser directory is only accessible to trusted users.

References

Link	Providers
https://support.zabbix.com/browse/ZBX-27283

History

Mon, 01 Dec 2025 21:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zabbix Zabbix zabbix-agent
Vendors & Products		Zabbix Zabbix zabbix-agent

Mon, 01 Dec 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 01 Dec 2025 13:30:00 +0000

Type	Values Removed	Values Added
Description		Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.
Title		Agent builds for AIX vulnerable to library loading hijacking
Weaknesses		CWE-426
References		https://support.zabbix.com/browse/ZBX-27283
Metrics		cvssV4_0 `{'score': 5.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: Zabbix

Published: 2025-12-01T13:03:38.752Z

Updated: 2025-12-01T14:36:26.384Z

Reserved: 2025-06-09T12:23:32.445Z

Link: CVE-2025-49642

Vulnrichment

Updated: 2025-12-01T14:36:18.892Z

NVD

Status : Awaiting Analysis

Published: 2025-12-01T14:16:05.420

Modified: 2025-12-01T15:39:33.110

Link: CVE-2025-49642

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-12-01T21:27:28Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-49642", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "state": "PUBLISHED", "assignerShortName": "Zabbix", "dateReserved": "2025-06-09T12:23:32.445Z", "datePublished": "2025-12-01T13:03:38.752Z", "dateUpdated": "2025-12-01T14:36:26.384Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "modules": ["Agent"], "product": "Zabbix", "repo": "https://git.zabbix.com/", "vendor": "Zabbix", "versions": [{"changes": [{"at": "6.0.40", "status": "unaffected"}], "lessThanOrEqual": "6.0.36", "status": "affected", "version": "6.0.0", "versionType": "git"}, {"changes": [{"at": "7.0.6", "status": "unaffected"}], "lessThanOrEqual": "7.0.5", "status": "affected", "version": "7.0.0", "versionType": "git"}, {"changes": [{"at": "7.2.6", "status": "unaffected"}], "lessThan": "7.2.1", "status": "affected", "version": "7.2.0", "versionType": "git"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Exploitation requires access to a local user account with write permissions to /home/cecuser.</p>"}], "value": "Exploitation requires access to a local user account with write permissions to /home/cecuser."}], "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank Jos\u00e9 Pina Coelho for finding and reporting this issue."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.</p>"}], "value": "Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory."}], "impacts": [{"capecId": "CAPEC-159", "descriptions": [{"lang": "en", "value": "CAPEC-159: Redirect Access to Libraries"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "baseScore": 5.8, "baseSeverity": "MEDIUM", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-426", "description": "CWE-426: Untrusted Search Path", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2025-12-01T13:03:38.752Z"}, "references": [{"url": "https://support.zabbix.com/browse/ZBX-27283"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Update AIX Zabbix Agent packages to their respective fixed versions.</p>"}], "value": "Update AIX Zabbix Agent packages to their respective fixed versions."}], "source": {"discovery": "EXTERNAL"}, "title": "Agent builds for AIX vulnerable to library loading hijacking", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Make sure /home/cecuser directory is only accessible to trusted users.</p>"}], "value": "Make sure /home/cecuser directory is only accessible to trusted users."}], "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-01T14:36:06.559257Z", "id": "CVE-2025-49642", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-01T14:36:26.384Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-49642", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-01T14:36:06.559257Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-01T14:36:18.892Z"}}], "cna": {"title": "Agent builds for AIX vulnerable to library loading hijacking", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank Jos\u00e9 Pina Coelho for finding and reporting this issue."}], "impacts": [{"capecId": "CAPEC-159", "descriptions": [{"lang": "en", "value": "CAPEC-159: Redirect Access to Libraries"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://git.zabbix.com/", "vendor": "Zabbix", "modules": ["Agent"], "product": "Zabbix", "versions": [{"status": "affected", "changes": [{"at": "6.0.40", "status": "unaffected"}], "version": "6.0.0", "versionType": "git", "lessThanOrEqual": "6.0.36"}, {"status": "affected", "changes": [{"at": "7.0.6", "status": "unaffected"}], "version": "7.0.0", "versionType": "git", "lessThanOrEqual": "7.0.5"}, {"status": "affected", "changes": [{"at": "7.2.6", "status": "unaffected"}], "version": "7.2.0", "lessThan": "7.2.1", "versionType": "git"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Update AIX Zabbix Agent packages to their respective fixed versions.", "supportingMedia": [{"type": "text/html", "value": "<p>Update AIX Zabbix Agent packages to their respective fixed versions.</p>", "base64": false}]}], "references": [{"url": "https://support.zabbix.com/browse/ZBX-27283"}], "workarounds": [{"lang": "en", "value": "Make sure /home/cecuser directory is only accessible to trusted users.", "supportingMedia": [{"type": "text/html", "value": "<p>Make sure /home/cecuser directory is only accessible to trusted users.</p>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.", "supportingMedia": [{"type": "text/html", "value": "<p>Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-426", "description": "CWE-426: Untrusted Search Path"}]}], "configurations": [{"lang": "en", "value": "Exploitation requires access to a local user account with write permissions to /home/cecuser.", "supportingMedia": [{"type": "text/html", "value": "<p>Exploitation requires access to a local user account with write permissions to /home/cecuser.</p>", "base64": false}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2025-12-01T13:03:38.752Z"}}}, "cveMetadata": {"cveId": "CVE-2025-49642", "state": "PUBLISHED", "dateUpdated": "2025-12-01T14:36:26.384Z", "dateReserved": "2025-06-09T12:23:32.445Z", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "datePublished": "2025-12-01T13:03:38.752Z", "assignerShortName": "Zabbix"}, "dataVersion": "5.2"}