CVE-2021-40905

CVE-2021-40905 describes a remote code execution vulnerability in the web management console of CheckMK Enterprise Edition versions 1.5.0 through 2.0.0p9. The vulnerability stems from improper sanitization of uploaded ".mkp" extension package files, allowing an authenticated administrator to execute arbitrary code. With a CVSS score of 8.8 (HIGH), successful exploitation requires network access and either valid administrator credentials or a hijacked administrative session, leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage. The vendor considers this intended behavior for administrators.