NetSight
medium5.2

CVE-2026-105331

Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-orac…

Impact

Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.

Affected products

VendorProductAffected versions
CheckmkCheckmk 2.5.0
before 2.5.0p10

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References