Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://checkmk.com/werk/22621 |
|
History
Wed, 21 Oct 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled. | |
| Title | mk-oracle: Local privilege escalation via insecure Oracle Home library loading | |
| First Time appeared |
Checkmk
Checkmk checkmk |
|
| Weaknesses | CWE-426 CWE-829 |
|
| CPEs | cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Checkmk
Checkmk checkmk |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Checkmk
Published:
Updated: 2026-10-21T18:11:34.774Z
Reserved: 2026-10-20T07:46:46.328Z
Link: CVE-2026-113461
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-10-21T19:16:59.903
Modified: 2026-10-21T19:17:00.057
Link: CVE-2026-113461
Redhat
No data.
OpenCVE Enrichment
No data.