CVE-2025-5965 Centreon CVE debrief

Who should care

Centreon administrators, security teams, and IT professionals responsible for Centreon Infra Monitoring systems should be aware of this vulnerability and take necessary actions to mitigate or patch it.

Why it matters

This high-severity vulnerability requires immediate attention from Centreon administrators and security teams to prevent potential OS command injection attacks and protect their systems.

• Potential OS command injection attacks
• Elevation of privileges for high-privilege users
• Possible disruption of Centreon Infra Monitoring services

Technical summary

The CVE-2025-5965 vulnerability is an OS Command Injection issue in Centreon Infra Monitoring's backup configuration setup. It allows users with high privileges to concatenate custom instructions to the backup setup, potentially leading to OS command injection attacks. The vulnerability affects multiple versions of Centreon Infra Monitoring, including 25.10.0 before 25.10.2, 24.10.0 before 24.10.15, and 24.04.0 before 24.04.19. Centreon administrators and security teams should prioritize patching or mitigating this vulnerability to prevent potential OS command injection attacks.

Defensive priority

Centreon administrators and security teams should prioritize patching or mitigating this vulnerability to prevent potential OS command injection attacks.

Recommended defensive actions

• Apply patches or updates to affected Centreon Infra Monitoring versions
• Restrict access to backup configuration setup for high-privilege users
• Monitor for suspicious activity or anomalies in Centreon Infra Monitoring systems
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 7.2 and affected versions. However, there is limited information on potential exploitation or victim impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.