CVE-2026-103674: NetApp ONTAP special agent exposes password in process list

Published Nov 6, 2026

Updated

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Checkmk to a version that resolves this vulnerability.
Fixed in 2.5.0p16

Event History

Nov 6, 2026

CVE Published

via MITRE·09:06 AM

Data Sourced

via MITRE·09:06 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

A local user on the Checkmk server can read the NetApp login password from the process list while the NetApp ONTAP special agent is running.

Are credentials from the password store protected from this exposure?

No. The issue affects both passwords explicitly configured for the special agent and passwords supplied through the password store.

Which deployments are affected?

Checkmk 2.5.0 releases before 2.5.0p16 are affected when the NetApp ONTAP special agent is invoked with a login password.

CVE-2026-103674: NetApp ONTAP special agent exposes password in process list

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Are credentials from the password store protected from this exposure?

Which deployments are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Are credentials from the password store protected from this exposure?

Which deployments are affected?