Dashboard / CVE-2026-111573

CVE-2026-111573

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 38/100
Published: 2026-11-06 Modified: 2026-11-10 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.

Weakness Classification (1)

Affected Software (12)

VendorProductVersion
Checkmk GmbH Checkmk 2.5.0 < 2.5.0p18
Checkmk GmbH Checkmk 2.4.0 < 2.4.0p39
Checkmk GmbH Checkmk 2.3.0 < 2.3.0p52
Checkmk GmbH Checkmk 2.2.0
Checkmk GmbH Checkmk 2.5.0 < 2.5.0p18
Checkmk GmbH Checkmk 2.4.0 < 2.4.0p39
Checkmk GmbH Checkmk 2.3.0 < 2.3.0p52
Checkmk GmbH Checkmk 2.2.0
Checkmk GmbH Checkmk 2.5.0 < 2.5.0p18
Checkmk GmbH Checkmk 2.4.0 < 2.4.0p39
Checkmk GmbH Checkmk 2.3.0 < 2.3.0p52
Checkmk GmbH Checkmk 2.2.0

References & Advisories (1)

Bug Bounty Relevance

38 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.3 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.13%
Raw Score 0.001310
Percentile 2.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00131
2026-11-12
0.00131
2026-11-10
0.00131
2026-11-09
0.00131
2026-11-08
0.00131
2026-11-07
0.00131

Intelligence Sources

mitre ref →
nvd ref →

External Links