CVE-2026-113461

Vulnerability Description

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.

Related Weaknesses (CWE)

CWE-426 CWE-829

References

https://checkmk.com/werk/22621

FAQ

What is CVE-2026-113461?

CVE-2026-113461 is a documented vulnerability. Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself...

How severe is CVE-2026-113461?

CVSS scoring is not yet available for CVE-2026-113461. Check NVD for updates.

Is there a patch for CVE-2026-113461?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.