Description
Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Checkmk | Checkmk | 2.5.0 – < 2.5.0p10 | 2.5.0p10 |
Advisories 1
- WID-SEC-2026-3801 Checkmk: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Oct 8, 2026
References
- https://checkmk.com/werk/22619 vendor-advisory