CVE-2025-58121: Insufficient permission validation on multiple REST API endpoints
Published Nov 18, 2025
·Updated
Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information
Affected Software
24 affected components
Checkmk Checkmk>=2.2.0<2.4.0p16
Checkmk Checkmk>=2.2.0<2.4.0
Checkmk Checkmk=2.4.0
Checkmk Checkmk=2.4.0-b1
Checkmk Checkmk=2.4.0-b2
Checkmk Checkmk=2.4.0-b3
Checkmk Checkmk=2.4.0-b4
Checkmk Checkmk=2.4.0-b5
Checkmk Checkmk=2.4.0-b6
Checkmk Checkmk=2.4.0-p1
Checkmk Checkmk=2.4.0-p10
Checkmk Checkmk=2.4.0-p11
Checkmk Checkmk=2.4.0-p12
Checkmk Checkmk=2.4.0-p13
Checkmk Checkmk=2.4.0-p14
Checkmk Checkmk=2.4.0-p15
Checkmk Checkmk=2.4.0-p2
Checkmk Checkmk=2.4.0-p3
Checkmk Checkmk=2.4.0-p4
Checkmk Checkmk=2.4.0-p5
Checkmk Checkmk=2.4.0-p6
Checkmk Checkmk=2.4.0-p7
Checkmk Checkmk=2.4.0-p8
Checkmk Checkmk=2.4.0-p9
Event History
Nov 18, 2025
CVE Published
via MITRE·03:11 PM
Data Sourced
via MITRE·03:11 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58121?
CVE-2025-58121 has a high severity due to insufficient permission validation allowing unauthorized access.
2
How do I fix CVE-2025-58121?
To fix CVE-2025-58121, upgrade Checkmk to version 2.4.0p16 or later.
3
What versions of Checkmk are affected by CVE-2025-58121?
CVE-2025-58121 affects Checkmk versions 2.2.0, 2.3.0, and 2.4.0 prior to version 2.4.0p16.
4
What actions can low-privileged users perform due to CVE-2025-58121?
Due to CVE-2025-58121, low-privileged users may perform unauthorized actions or access sensitive information.
5
Is CVE-2025-58121 related to REST API security?
Yes, CVE-2025-58121 is specifically about insufficient permission validation on multiple REST API endpoints.