CVE-2023-1550: F5 Nginx Agent

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.

Affected products

• F5 Nginx Agent: from 2.0.0, before 2.23.3 (fixed in 2.23.3)
• F5 Nginx Instance Manager: from 2.0.0, before 2.9.0 (fixed in 2.9.0)

Published 2023-03-29. Last modified 2026-06-17.