Index: script/munin-run
--- script/munin-run.orig
+++ script/munin-run
@@ -310,6 +310,9 @@ sub execute_plugin {
         print STDERR "# Unknown service '$plugin'\n";
         exit 1;
     }
+    # plugins run in taint mode because the uid is changed, so the path
+    # must not contain writable directories.
+    $ENV{PATH}='/bin:/sbin:/usr/bin:/usr/sbin:${PREFIX}/bin:${PREFIX}/sbin';
 
     $services->prepare_plugin_environment($plugin);
 
