Argument Injection Vulnerability in Checkmk by Tribe29
CVE-2025-1712
8.7HIGH
What is CVE-2025-1712?
An argument injection vulnerability has been discovered in Checkmk that affects various versions. This flaw allows authenticated attackers to exploit the special agent configuration, potentially leading to arbitrary file writing. By manipulating the input, attackers can gain unauthorized access to sensitive data or execute harmful scripts, which poses a significant risk to affected systems. Users are encouraged to update to the latest versions to mitigate this vulnerability.
Affected Version(s)
Checkmk 2.4.0 < 2.4.0p1
Checkmk 2.3.0 < 2.3.0p32
Checkmk 2.2.0 < 2.2.0p42