CVE-2025-49642
CVE-2025-49642 · Agent builds for AIX vulnerable to library loading hijacking
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.
CVSS 5.8 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: applications
Affected products and versions
zabbix
- Versions
- ≥ 6.0.0, ≤ 6.0.36: Affected; ≥ 6.0.40: Not affected (git)
- ≥ 7.0.0, ≤ 7.0.5: Affected; ≥ 7.0.6: Not affected (git)
- ≥ 7.2.0, < 7.2.1: Affected; ≥ 7.2.6: Not affected (git)
Update to 6.0.40; Update to 7.0.6; Update to 7.2.6