CVE-2026-105331

mk-oracle: Local privilege escalation via malicious Oracle Instant Client PUBLISHED

Description (CNA)

Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.5.0 before 2.5.0p10

CWE

CWE-426, CWE-829

References

https://checkmk.com/werk/22619

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.