CVE-2025-27234
Fixed in a distro release EPSS <1%CVSS 7.3
Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution.
Products: Zabbix
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:11 | zabbix | 1:5.0.47+dfsg-0+deb11u1 |
| Debian:12 | zabbix | 1:6.0.7+dfsg-2 |
| Debian:13 | zabbix | 1:6.0.7+dfsg-2 |
| Debian:14 | zabbix | 1:6.0.7+dfsg-2 |
| Ubuntu:Pro:14.04:LTS | zabbix | no fix |
| Ubuntu:Pro:16.04:LTS | zabbix | no fix |
| Ubuntu:Pro:18.04:LTS | zabbix | no fix |
| Ubuntu:Pro:20.04:LTS | zabbix | no fix |
| Ubuntu:Pro:22.04:LTS | zabbix | no fix |