Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-64996 EUVD-2025-198049GHSA-g5vj-46wr-fpx5

Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

Published Nov 18, 2025 · Updated Nov 18, 2025 · Assigned by Checkmk

Description

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.

Affected products

VendorProductAffectedFixed
Checkmk Checkmk 2.4.0 – < 2.4.0p16, 2.3.0 – < 2.3.0p41, 2.2.0, 2.1.0 2.4.0p16

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS check-mk No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS check-mk No fix yet —

Advisories 1

References