SSH Key Exposure in Checkmk Remote Alert Handlers

CVE-2025-65000

What is CVE-2025-65000?

An issue has been identified in Checkmk where SSH private keys associated with the 'Remote alert handlers (Linux)' rule were inadvertently exposed within the HTML source of the rule page. This vulnerability affects Checkmk versions up to and including 2.4.0p18 and all versions of Checkmk 2.3.0, potentially allowing unauthorized access to trigger predefined alert handlers on relevant hosts.

References