CRITICALCVSS v4 9.4Vulnerability
CVE-2026-121374
Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule option, leading to code execution as the site user.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- CRITICAL
- Cvss score
- 9.4
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 9.4
- Cvss version
- 4.0
- Last source
- NVD
- Cve id
- CVE-2026-121374
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-11T11:39:15+00:00
- Name
- CVE-2026-121374
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published at
- 2026-11-11T11:17:14.377
- Last modified
- 2026-11-11T11:17:14.487
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph