Auth bypass in Checkmk Gmbh
CVE-2026-8593
Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows users without permissions to view and modify BI packs and rules
Vulnerability class: Broken Access Control
Affected products
- Checkmk Gmbh — versions 2.5.0, 2.4.0, 2.3.0
Weakness classification (CWE)
References
- security@checkmk.com (vendor-advisory)