CVE-2026-121374

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

CVE-2026-121374

Checkmk versions <2.5.0p19 ,

EUVD-2026-123350

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

CVE-2026-121374 Arbitrary file write and code execution via excluded node roles in Kubernetes special agent

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

CVE-2026-121374

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

PT-2026-145118

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p19 Checkmk versions prior to 2.4.0p40 Checkmk version 2.3.0 Description An argument injection flaw exists in the Kubernetes special agent. A user with permissions to edit rules in at least one folder can write...

CVE-2026-121374: Checkmk GmbH Checkmk: Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with…

Argument injection in the Kubernetes special agent in Checkmk 2.5.0p19, 2.4.0p40, and 2.3.0 EOL allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule...

Linux Distros Unpatched Vulnerability : CVE-2026-103674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the...

CVE-2026-103674

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-103682 Jolokia special agent exposes password in process list

Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the Jolokia login password from the process list while the special agent is running. This affects both explicitly...

EUVD-2026-118026

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

UBUNTU-CVE-2026-103674

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

Linux Distros Unpatched Vulnerability : CVE-2025-1712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...

UBUNTU-CVE-2025-1712

Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...

CVE-2025-1712 Arbitrary file write with vcrtrace

Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...

CSI: Cyber: We Watched So You Didn't Have To

From the time the first commercials aired during the American pro football championship game last month, CSI: Cyber has been one of the more talked-about and least-anticipated shows in recent memory. At least in tech circles. For normal viewers, it’s one of those shows that you wake up in the...

Anonymous Hacks, Leaks E-mails, Voicemails of California Special Agent

Calling it a form of “electronic civil disobedience,” hacktivist group Anonymous took aim at a special agent from the California Department of Justice on Friday. The group spilled 38,000 e-mails containing “computer forensics techniques, investigation protocols as well as highly embarrassing...