Session Logout Vulnerability in Checkmk by Checkmk GmbH

CVE-2025-2596

What is CVE-2025-2596?

A session management vulnerability in Checkmk products exists where the logout functionality can be manipulated, leading to unintended session persistence for users. This flaw affects versions of Checkmk prior to 2.3.0p30, as well as versions 2.2.0p41 and 2.1.0p49, which is now end-of-life. Users are at risk of having their sessions improperly managed if the logout process is compromised, potentially allowing unauthorized access to sensitive features and data.

References