CVE-2025-34322: Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimen

Nagios Log Server versions before 2026R1.0.1 have a command injection vulnerability (a flaw where attackers can insert malicious commands into input fields) in its experimental Natural Language Queries feature. An authenticated user (someone with a valid login) can exploit this by entering crafted values in the Global Settings page to run arbitrary commands on the server as the 'www-data' user (the account the web server runs under), potentially taking over the entire Log Server.