A critical authentication bypass vulnerability in LibreNMS allows unauthenticated attackers to gain administrative access and execute arbitrary code, posing a severe risk to network infrastructure.

The vulnerability stems from improper authentication handling within the REST API, where the application fails to validate token types correctly. An unauthenticated attacker can exploit MySQL type coercion by submitting numeric values to bypass token verification, granting access to administrative functions and alert templates capable of remote code execution.

Successful exploitation allows an unauthenticated actor to bypass security controls and interact with the LibreNMS API as an administrator. This access exposes sensitive device credentials, network topology data, and provides a direct path to remote code execution, which could lead to a complete compromise of the monitored network environment. The 9.2 CVSS score reflects the critical nature of this flaw due to the lack of required authentication and the severe impact on system integrity and availability.

Immediate Action: Upgrade LibreNMS to version 26.8.0 or later immediately to incorporate the necessary authentication logic improvements.

Proactive Monitoring: Review API access logs for anomalous requests, specifically targeting non-string or numeric payloads directed toward token-protected endpoints.

Compensating Controls: Implement strict network access control lists to restrict API access to trusted management subnets and deploy a Web Application Firewall to block suspicious API traffic patterns.

Public Exploit Available: Unknown

This vulnerability represents a critical security failure that bypasses fundamental access controls. Organizations relying on LibreNMS for network monitoring must prioritize the upgrade to version 26.8.0 to prevent unauthorized administrative access. Failure to remediate this issue could result in total compromise of the network management platform and the underlying infrastructure it oversees.