Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-39666

omd: Local privilege escalation when executing omd commands as root

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escalate their privileges to root, by manipulating files in the site context that are processed when the `omd` administrative command is run by root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.2.0affected
  • 2.3.0 to < 2.3.0p46affected
  • 2.4.0 to < 2.4.0p25affected
  • 2.5.0b1 to < 2.5.0b3affected

References