Description Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.
A Livestatus injection vulnerability has been identified in the prediction graph page of Checkmk versions prior to 2.5.0b4, 2.4.0p26, and 2.3.0p47. This vulnerability allows authenticated users to inject arbitrary Livestatus commands by crafting the service name parameter. The issue arises from inadequate sanitization of the service description value.
Users can upgrade to Checkmk versions 2.6.0b1, 2.5.0b4, 2.4.0p26, or 2.3.0p47 to address this vulnerability.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 14, 2026 Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions checkmk checkmk 2.3.0 -
2.3.0 b1
2.3.0 b2
2.3.0 b3
2.3.0 b4
2.3.0 b5
2.3.0 b6
2.3.0 p1
2.3.0 p10
2.3.0 p11
2.3.0 p12
2.3.0 p13
2.3.0 p14
2.3.0 p15
2.3.0 p16
2.3.0 p17
2.3.0 p18
2.3.0 p19
2.3.0 p2
2.3.0 p20
2.3.0 p21
2.3.0 p22
2.3.0 p23
2.3.0 p24
2.3.0 p25
2.3.0 p26
2.3.0 p27
2.3.0 p28
2.3.0 p29
2.3.0 p3
2.3.0 p30
2.3.0 p31
2.3.0 p32
2.3.0 p33
2.3.0 p34
2.3.0 p35
2.3.0 p36
2.3.0 p37
2.3.0 p38
2.3.0 p39
2.3.0 p4
2.3.0 p40
2.3.0 p41
2.3.0 p42
2.3.0 p43
2.3.0 p44
2.3.0 p45
2.3.0 p46
2.3.0 p5
2.3.0 p6
2.3.0 p7
2.3.0 p8
2.3.0 p9
2.4.0 -
2.4.0 b1
2.4.0 b2
2.4.0 b3
2.4.0 b4
2.4.0 b5
2.4.0 b6
2.4.0 p1
2.4.0 p10
2.4.0 p11
2.4.0 p12
2.4.0 p13
2.4.0 p14
2.4.0 p15
2.4.0 p16
2.4.0 p17
2.4.0 p18
2.4.0 p19
2.4.0 p2
2.4.0 p20
2.4.0 p21
2.4.0 p22
2.4.0 p23
2.4.0 p24
2.4.0 p25
2.4.0 p3
2.4.0 p4
2.4.0 p5
2.4.0 p6
2.4.0 p7
2.4.0 p8
2.4.0 p9
2.5.0 b1
2.5.0 b2
2.5.0 b3
Viewing 5 of 88 versions. View all CPE cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:b6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p38:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p39:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p40:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p41:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p42:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p43:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p44:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p45:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p46:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:b6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p13:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p14:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p15:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p16:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p17:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p18:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p19:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p20:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p21:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p22:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p23:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p24:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p25:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.5.0:b1:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.5.0:b2:*:*:*:*:*:* cpe:2.3:a:checkmk:checkmk:2.5.0:b3:*:*:*:*:*:* Remediation No remediation found in references.
Change History 4 change records found show changes