PT-2025-41389 · Checkmk · Checkmk

Lisa Gnedt · Published 2025-10-09 · Updated 2025-10-09 · CVE-2025-39664

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p13 Checkmk versions prior to 2.3.0p38 Checkmk versions prior to 2.2.0p46 Checkmk version 2.1.0

Description A flaw exists in the report scheduler of Checkmk that allows authenticated attackers to define the storage location of report file pairs outside of the intended root directory due to insufficient escaping. This could allow for unauthorized file access or modification.

Recommendations Update Checkmk to version 2.4.0p13 or later. Update Checkmk to version 2.3.0p38 or later. Update Checkmk to version 2.2.0p46 or later. Do not use Checkmk version 2.1.0 as it is end-of-life.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-39664

Affected Products

Checkmk

References · 9

• 🔥 https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250730-01_Checkmk_Path_Traversal · Exploit
• 🔥 http://seclists.org/fulldisclosure/2025/Oct/7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-39664 · Security Note
• https://ubuntu.com/security/CVE-2025-39664 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39664 · Vendor Advisory
• https://checkmk.com/werk/17984 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39664 · Security Note
• https://osv.dev/vulnerability/CVE-2025-39664 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1976315467070402588 · Twitter Post