CVE-2024-31459
Cacti RCE vulnerability by file include in lib/plugin.php
HIGH 7.2EPSS 2.7%
Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.php` file. Combined with SQL injection vulnerabilities, remote code execution can be implemented. There is a file inclusion issue with the `api_plugin_hook()` function in the `lib/plugin.php` file, which reads the plugin_hooks and plugin_config tables in database. The read data is directly used to concatenate the file path which is used for file inclusion. Version 1.2.27 contains a patch for the issue.
- Affected
- Cacti · cacti
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 GITHUB
- 8.0 HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- 2.68% chance of exploitation in the next 30 days, 86th percentile
- Published
- 2024-05-13
- Updated
- 2025-12-16
Proof-of-concept exploits (2)
- Cacti/cacti/security/advisories/GHSA-cx8g-hvq8-p2rv
- Cacti/cacti/security/advisories/GHSA-gj3f-p326-gh8r
Security advisories
- Cacti/cacti/security/advisories/GHSA-pfh9-gwm6-86vp
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/me…