CVE-2025-32919

Privilege Escalation in Windows License plugin for Checkmk Windows Agent

State: Published
Severity: 8.8 High
Published: Oct 9, 2025
Updated: Nov 3, 2025
Reserved: Apr 14, 2025

Description

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).

Scores

CVSS	Score	Vector	Source
4.0	8.8 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	Checkmk

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
CheckmkCheckmk GmbH	2.4.0 to before 2.4.0p13Affected 2.3.0 to before 2.3.0p38Affected 2.2.0 to before 2.2.0p46Affected 2.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.