CVE-2026-113461: Checkmk 2.5.0p14

Affected technology

Checkmk · 2.5.0p14
Checkmk GmbH

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

A local user with write access can the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled. Vendor/CNA’s CVSS 4.0 assessment (base score 5.2/10) rates confidentiality, integrity and availability impact as none.