CVE-2025-39666 — omd: Local privilege escalation when executing omd commands as root

CVE-2025-39666

omd: Local privilege escalation when executing omd commands as root PUBLISHED

Description (CNA)

Local privilege escalation in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (beta) before 2.5.0b3 allows a site user to escalate their privileges to root, by manipulating files in the site context that are processed when the `omd` administrative command is run by root.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.2.0; affected 2.3.0 before 2.3.0p46; affected 2.4.0 before 2.4.0p25; affected 2.5.0b1 before 2.5.0b3

CWE

CWE-426, CWE-829

References

https://checkmk.com/werk/18891

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.