Zabbix up to 6.0.36/7.0.5/7.2.0 on AIX /home/cecuser untrusted search path

Summaryinfo

A vulnerability categorized as problematic has been discovered in Zabbix up to 6.0.36/7.0.5/7.2.0 on AIX. This affects an unknown part of the file /home/cecuser. The manipulation results in untrusted search path. This vulnerability is reported as CVE-2025-49642. The attack requires a local approach. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Zabbix up to 6.0.36/7.0.5/7.2.0 on AIX. It has been classified as critical. Affected is an unknown functionality of the file /home/cecuser. The manipulation with an unknown input leads to a untrusted search path vulnerability. CWE is classifying the issue as CWE-426. The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.

The advisory is shared for download at support.zabbix.com. This vulnerability is traded as CVE-2025-49642 since 06/09/2025. The exploitability is told to be difficult. The attack needs to be approached locally. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1574.

Upgrading to version 7.2.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-199986). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Network Management Software

Name

• Zabbix

Version

• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.0.8
• 6.0.9
• 6.0.10
• 6.0.11
• 6.0.12
• 6.0.13
• 6.0.14
• 6.0.15
• 6.0.16
• 6.0.17
• 6.0.18
• 6.0.19
• 6.0.20
• 6.0.21
• 6.0.22
• 6.0.23
• 6.0.24
• 6.0.25
• 6.0.26
• 6.0.27
• 6.0.28
• 6.0.29
• 6.0.30
• 6.0.31
• 6.0.32
• 6.0.33
• 6.0.34
• 6.0.35
• 6.0.36
• 7.0
• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.1
• 7.2.0

License

• open-source

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion