CVE-2023-34254

CVE-2023-34254 is a high-severity command injection vulnerability affecting GLPI Agent versions prior to 1.5. An authenticated administrator on a remote Unix system can inject commands during the remoteinventory task, potentially leading to high-privilege execution on the agent's host or disclosure of remote access credentials. The vulnerability has a CVSS score of 7.2 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.