CVE-2026-121374 PUBLISHED

Arbitrary file write and code execution via excluded node roles in Kubernetes special agent

Assigner: Checkmk
Reserved: 03.11.2026 Published: 11.11.2026 Updated: 11.11.2026

Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule option, leading to code execution as the site user.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 9.4

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	High	Confidentiality	High
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	Checkmk GmbH
Product	Checkmk
Versions	Default: unaffected affected from 2.5.0 to 2.5.0p19 (excl.) affected from 2.4.0 to 2.4.0p40 (excl.) Version 2.3.0 is affected

References

https://checkmk.com/werk/17994

Problem Types

CWE-88: Improper Neutralization of Argument Delimiters in a Command CWE

Impacts

CAPEC-137: Parameter Injection