Privilege Escalation Vulnerability in Checkmk Agent Plugin

CVE-2025-32917

What is CVE-2025-32917?

A privilege escalation vulnerability exists in the jar_signature agent plugin of Checkmk that affects multiple versions. This flaw allows a user with write access to the JAVA_HOME/bin directory to gain elevated privileges, which can lead to unauthorized actions on the system. Organizations utilizing affected version are advised to implement immediate mitigation measures.

References