CVE-2026-121374
Arbitrary file write and code execution via excluded node roles in Kubernetes special agent
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule option, leading to code execution as the site user.
| CWE | CWE-88 |
| Vendor | checkmk gmbh |
| Product | checkmk |
| Published | Nov 11, 2026 |
| Last Updated | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for checkmk gmbh checkmk
Be the first to know when new unknown vulnerabilities affecting checkmk gmbh checkmk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Checkmk GmbH / Checkmk
2.5.0 < 2.5.0p19 2.4.0 < 2.4.0p40 2.3.0