CVE-2025-39666

CVE-2025-39666 is a local privilege escalation vulnerability affecting multiple versions of Checkmk, an open-source IT monitoring platform. The flaw exists in Checkmk 2.2.0 (end-of-life), 2.3.0 before 2.3.0p46, 2.4.0 before 2.4.0p25, and 2.5.0 beta before 2.5.0b3. An authenticated site user can exploit this by manipulating files in the site context that are processed when the omd administrative command is executed by root, resulting in privilege escalation to root access. The vulnerability carries a CVSS score of 7.3 (HIGH) with a local attack vector requiring low complexity and low privileges. User interaction is required for exploitation. Successful exploitation results in complete system compromise, as attackers would gain high-impact confidentiality, integrity, and availability violations through root-level access. There are no indications of active exploitation in the wild. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog, and community attention appears limited with an EPSS score of 0.00012 indicating minimal prevalence among disclosed vulnerabilities. Organizations running affected versions should prioritize patching to the specified fixed versions (2.3.0p46, 2.4.0p25, or 2.5.0b3 and later) to mitigate the risk.