Arbitrary root file disclosure via unconfined --filename

Path traversal in the logfile plugin in Linuxfabrik Monitoring Plugins before 7.0.0 allows local users to read root-readable files via --filename. After time-macro expansion, the plugin passes the supplied path to Python open() while running as root and returns matched lines through warn_matches and lib.base.oao() without real-path containment or a log-directory allowlist. Exploitation requires control of the nagios or icinga account, or another local path to the sudo-whitelisted check; the direct impact is file disclosure, and privilege escalation depends on secrets exposed by the chosen file.