CVE-2025-39664

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p13 Checkmk versions prior to 2.3.0p38 Checkmk versions prior to 2.2.0p46 Checkmk version 2.1.0

Description A flaw exists in the report scheduler of Checkmk that allows authenticated attackers to define the storage location of report file pairs outside of the intended root directory due to insufficient escaping. This could allow for unauthorized file access or modification.

Recommendations Update Checkmk to version 2.4.0p13 or later. Update Checkmk to version 2.3.0p38 or later. Update Checkmk to version 2.2.0p46 or later. Do not use Checkmk version 2.1.0 as it is end-of-life.