CVE-2022-22704: Zabbix Zabbix-AGENT2

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.

Affected products

• Zabbix Zabbix-AGENT2: before 5.4.9 (fixed in 5.4.9); version 5.4.9 only

Published 2022-01-06. Last modified 2026-06-17.