CVE-2025-32919 — Privilege Escalation in Windows License plugin for Checkmk Windows Agent

CVE-2025-32919

Privilege Escalation in Windows License plugin for Checkmk Windows Agent PUBLISHED

Description (CNA)

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p13; affected 2.3.0 before 2.3.0p38; affected 2.2.0 before 2.2.0p46; affected 2.1.0

CWE

CWE-427

References

https://checkmk.com/werk/18207
https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250724-01_Checkmk_Agent_Privilege_Escalation_via_Insecure_Temporary_Files

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Oct/6