What is GHSA-2pwc-pprg-4jmv?

GHSA-2pwc-pprg-4jmv is a security advisory published by GitHub Security Advisories with Medium severity. Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the...

Which CVE IDs does GHSA-2pwc-pprg-4jmv cover?

GHSA-2pwc-pprg-4jmv covers the following CVE IDs: CVE-2026-113461. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-2pwc-pprg-4jmvMedium

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-113461 →

📋 Description

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-113461
https://checkmk.com/werk/22621
https://github.com/advisories/GHSA-2pwc-pprg-4jmv