Description
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Checkmk | Checkmk | 2.5.0 – < 2.5.0p18, 2.4.0 – < 2.4.0p39, 2.3.0 – < 2.3.0p52, 2.2.0 | 2.5.0p18 |
Advisories 1
- WID-SEC-2026-4113 Checkmk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
References
- https://checkmk.com/werk/19231 vendor-advisory