by Kastro
Paper/Archive/CVE-2025-39666

CVE-2025-39666

Checkmk GmbH Checkmk — omd: Local privilege escalation when executing omd commands as root

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 1.9.019 × 200.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escalate their privileges to root, by manipulating files in the site context that are processed when the `omd` administrative command is run by root.

Affected

ProductAffectedFixed inSource
Checkmk2.2.0–CNA
Checkmk2.3.0 – < 2.3.0p462.3.0p46CNA
Checkmk2.4.0 – < 2.4.0p252.4.0p25CNA
Checkmk2.5.0b1 – < 2.5.0b32.5.0b3CNA

Scores by source

Checkmk (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorycheckmk.com/werk/18891