Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).
References
History

Fri, 10 Oct 2025 11:30:00 +0000

Type Values Removed Values Added
First Time appeared Checkmk
Checkmk checkmk
Microsoft
Microsoft windows
Vendors & Products Checkmk
Checkmk checkmk
Microsoft
Microsoft windows

Thu, 09 Oct 2025 15:15:00 +0000

Type Values Removed Values Added
Description Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).
Title Privilege Escalation in Windows License plugin for Checkmk Windows Agent
Weaknesses CWE-427
References
Metrics cvssV4_0

{'score': 8.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Checkmk

Published:

Updated: 2025-10-09T15:01:42.606Z

Reserved: 2025-04-14T09:52:19.273Z

Link: CVE-2025-32919

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-09T15:16:06.057

Modified: 2025-10-09T15:50:04.013

Link: CVE-2025-32919

cve-icon Redhat

No data.