Logic Error in Checkmk Allows Data Loss for Low-Privileged Users
CVE-2026-3103

5.3MEDIUM

Key Information:

Vendor

Checkmk Gmbh

Status
Checkmk
Vendor
CVE Published:
4 March 2026

What is CVE-2026-3103?

A logic flaw in the remove_password() function within Checkmk allows low-privileged users to exploit this vulnerability, potentially leading to data loss. This issue affects multiple versions of the Checkmk product, creating risks for organizations relying on these versions for critical operations. Prompt updates to the affected versions are essential to mitigate this risk.

Affected Version(s)

Checkmk 2.4.0 < 2.4.0p23

Checkmk 2.3.0 < 2.3.0p43

Checkmk 2.2.0

References

https://checkmk.com/werk/19041

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.