CVE-2025-64996CWE-732

CVE-2025-64996

Medium · published November 18, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-11-18T21:15Z
Affected products (70)
ProductVersionsFixed in
checkmk/checkmk< 2.3.02.3.0
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
checkmk/checkmkall versions—
References (1)
EPSS history
Timeline
  • 18 NOV 15:10Z
    Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output
    cvelistv5