CVE-2026-121374

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.5.0p19 Checkmk versions prior to 2.4.0p40 Checkmk version 2.3.0

Description An argument injection flaw exists in the Kubernetes special agent. A user with permissions to edit rules in at least one folder can write files to arbitrary locations writable by the site user. This is achieved by using crafted node roles within the "Exclude nodes based on their role" rule option, which can lead to code execution as the site user.

Recommendations Update to version 2.5.0p19 or later. Update to version 2.4.0p40 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.