CVE-2025-64997: Insufficient permission validation when showing agent information
Published Dec 18, 2025
·Updated
Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure.
Affected Software
73 affected components
Checkmk Checkmk<2.4.0p17, <2.3.0p42
Checkmk Checkmk=2.2.0
Checkmk Checkmk=2.3.0
Checkmk Checkmk=2.3.0-b1
Checkmk Checkmk=2.3.0-b2
Checkmk Checkmk=2.3.0-b3
Checkmk Checkmk=2.3.0-b4
Checkmk Checkmk=2.3.0-b5
Checkmk Checkmk=2.3.0-b6
Checkmk Checkmk=2.3.0-p1
Checkmk Checkmk=2.3.0-p10
Checkmk Checkmk=2.3.0-p11
Checkmk Checkmk=2.3.0-p12
Checkmk Checkmk=2.3.0-p13
Checkmk Checkmk=2.3.0-p14
Checkmk Checkmk=2.3.0-p15
Checkmk Checkmk=2.3.0-p16
Checkmk Checkmk=2.3.0-p17
Checkmk Checkmk=2.3.0-p18
Checkmk Checkmk=2.3.0-p19
Checkmk Checkmk=2.3.0-p2
Checkmk Checkmk=2.3.0-p20
Checkmk Checkmk=2.3.0-p21
Checkmk Checkmk=2.3.0-p22
Checkmk Checkmk=2.3.0-p23
Checkmk Checkmk=2.3.0-p24
Checkmk Checkmk=2.3.0-p25
Checkmk Checkmk=2.3.0-p26
Checkmk Checkmk=2.3.0-p27
Checkmk Checkmk=2.3.0-p28
Checkmk Checkmk=2.3.0-p29
Checkmk Checkmk=2.3.0-p3
Checkmk Checkmk=2.3.0-p30
Checkmk Checkmk=2.3.0-p31
Checkmk Checkmk=2.3.0-p32
Checkmk Checkmk=2.3.0-p33
Checkmk Checkmk=2.3.0-p34
Checkmk Checkmk=2.3.0-p35
Checkmk Checkmk=2.3.0-p36
Checkmk Checkmk=2.3.0-p37
Checkmk Checkmk=2.3.0-p38
Checkmk Checkmk=2.3.0-p39
Checkmk Checkmk=2.3.0-p4
Checkmk Checkmk=2.3.0-p40
Checkmk Checkmk=2.3.0-p41
Checkmk Checkmk=2.3.0-p5
Checkmk Checkmk=2.3.0-p6
Checkmk Checkmk=2.3.0-p7
Checkmk Checkmk=2.3.0-p8
Checkmk Checkmk=2.3.0-p9
Checkmk Checkmk=2.4.0
Checkmk Checkmk=2.4.0-b1
Checkmk Checkmk=2.4.0-b2
Checkmk Checkmk=2.4.0-b3
Checkmk Checkmk=2.4.0-b4
Checkmk Checkmk=2.4.0-b5
Checkmk Checkmk=2.4.0-b6
Checkmk Checkmk=2.4.0-p1
Checkmk Checkmk=2.4.0-p10
Checkmk Checkmk=2.4.0-p11
Checkmk Checkmk=2.4.0-p12
Checkmk Checkmk=2.4.0-p13
Checkmk Checkmk=2.4.0-p14
Checkmk Checkmk=2.4.0-p15
Checkmk Checkmk=2.4.0-p16
Checkmk Checkmk=2.4.0-p2
Checkmk Checkmk=2.4.0-p3
Checkmk Checkmk=2.4.0-p4
Checkmk Checkmk=2.4.0-p5
Checkmk Checkmk=2.4.0-p6
Checkmk Checkmk=2.4.0-p7
Checkmk Checkmk=2.4.0-p8
Checkmk Checkmk=2.4.0-p9
Event History
Dec 18, 2025
CVE Published
via MITRE·09:11 AM
Data Sourced
via MITRE·09:11 AM
DescriptionWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64997?
CVE-2025-64997 has a medium severity rating due to the potential for information disclosure.
2
How do I fix CVE-2025-64997?
To fix CVE-2025-64997, upgrade to Checkmk versions 2.4.0p17 or 2.3.0p42 or later.
3
What is the impact of CVE-2025-64997?
The impact of CVE-2025-64997 allows low-privileged users to access agent information via the REST API.
4
Which versions of Checkmk are affected by CVE-2025-64997?
CVE-2025-64997 affects Checkmk versions prior to 2.4.0p17 and 2.3.0p42.
5
Is there a workaround for CVE-2025-64997?
There are no documented workarounds for CVE-2025-64997, so upgrading is recommended.