LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration parameter is passed to shell_exec() without proper validation. An authenticated administrator can modify the snmpget configuration to point to a malicious executable file and trigger code execution by accessing the /about endpoint.

LibreNMS versions prior to 26.5.0 contain a remote code execution vulnerability in the AboutController component. The snmpget configuration parameter is passed directly to shell_exec() without proper sanitization or validation. An authenticated administrator can exploit this by modifying the snmpget configuration to reference a malicious executable. Code execution is then triggered by simply accessing the /about endpoint. The vulnerability requires administrator-level authentication, limiting the attack surface but not eliminating the risk. Fixes are available in LibreNMS version 26.5.0 and later. The issue is documented across NVD, GitHub Security Advisories, and VulnCheck.