CVE-2023-34254

The GLPI Agent is a generic management agent. Prior to version 1.5, if glpi-agent is running remoteinventory task against an Unix platform with ssh command, an administrator user on the remote can manage to inject a command in a specific workflow the agent would run with the privileges it uses. In the case, the agent is running with administration privileges, a malicious user could gain high privileges on the computer glpi-agent is running on. A malicious user could also disclose all remote accesses the agent is configured with for remoteinventory task. This vulnerability has been patched in glpi-agent 1.5.

• CWE-78

• https://github.com/glpi-project/glpi-agent/blob/dd313ee0914becf74c0e48cb512765210043b478/Changes#L98Patch
• https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-39vc-hxgm-j465Mitigation, Vendor Advisory
• https://github.com/glpi-project/glpi-agent/blob/dd313ee0914becf74c0e48cb512765210043b478/Changes#L98Patch
• https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-39vc-hxgm-j465Mitigation, Vendor Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34249benjjvi/PyBB is an open source bulletin board. Prior to comm…9.8
• CVE-2023-3425Out-of-bounds read issue in M-Files Server versions below 23…5.3
• CVE-2023-34250Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2023-34251Grav is a flat-file content management system. Versions prio…7.2
• CVE-2023-34252Grav is a flat-file content management system. Prior to vers…7.2
• CVE-2023-34253Grav is a flat-file content management system. Prior to vers…7.2
• CVE-2023-34255Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-34256An issue was discovered in the Linux kernel before 6.3.3. Th…5.5
• CVE-2023-34257An issue was discovered in BMC Patrol through 23.1.00. The a…9.8
• CVE-2023-34258An issue was discovered in BMC Patrol before 22.1.00. The ag…7.5
• CVE-2023-34259Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 al…4.9
• CVE-2023-3426The organization selector in Liferay Portal 7.4.3.81 through…4.3