Privilege Escalation Vulnerability in Checkmate Tool by Bluewave Labs
CVE-2026-31836

8.1HIGH

Key Information:

Vendor

Bluewave-labs

Status
Checkmate
Vendor
CVE Published:
20 March 2026

What is CVE-2026-31836?

Checkmate, a self-hosted open-source tool for server monitoring, has a mass assignment vulnerability in its user profile update endpoint. This flaw allows any authenticated user to escalate their privileges by modifying their own user role to superadmin. As a result, an attacker can gain complete administrative control over the application, compromising sensitive configurations and accessing critical system data. Currently, there are no publicly available patches to address this vulnerability.

Affected Version(s)

Checkmate <= 3.5.1

References

https://github.com/bluewave-labs/Checkmate/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.