CVE-2025-65000: Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65000?
CVE-2025-65000 has a high severity rating due to the exposure of SSH private keys.
How do I fix CVE-2025-65000?
To fix CVE-2025-65000, upgrade to Checkmk version 2.4.0p19 or later.
What are the risks associated with CVE-2025-65000?
The risks include unauthorized access to the system via exposed SSH private keys, allowing for potential malicious activity.
Which versions of Checkmk are affected by CVE-2025-65000?
CVE-2025-65000 affects Checkmk versions up to and including 2.4.0p18 and all versions of Checkmk 2.3.0.
What should I do if I can't immediately upgrade to fix CVE-2025-65000?
If an immediate upgrade isn't possible, review and secure your rule page to prevent access to the HTML source.