Medium severityNVD Advisory· Published Nov 6, 2026· Updated Nov 6, 2026
CVE-2026-111573
CVE-2026-111573
Description
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.5.0p18, <2.4.0p39, <2.3.0p52, <2.2.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.