CVE-2026-118965

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p19 Checkmk versions prior to 2.4.0p40 Checkmk version 2.3.0

Description A path traversal issue exists in the host label synchronization process. In a distributed monitoring setup, an attacker who controls a remote site can exploit this to write arbitrary files on the central site, leading to remote code execution as the central site user.

Recommendations Update to version 2.5.0p19. Update to version 2.4.0p40. At the moment, there is no information about a newer version that contains a fix for this vulnerability.