What is GHSA-p25x-4jr8-p5mr?

GHSA-p25x-4jr8-p5mr is a security advisory published by GitHub Security Advisories with Critical severity. Argument injection in the Kubernetes special agent in Checkmk \u003c2.5.0p19, \u003c2.4.0p40, and 2.3.0 ...

Which CVE IDs does GHSA-p25x-4jr8-p5mr cover?

GHSA-p25x-4jr8-p5mr covers the following CVE IDs: CVE-2026-121374. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-p25x-4jr8-p5mrCritical

Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 ...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-121374 →

📋 Description

Argument injection in the Kubernetes special agent in Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows a user with permission to edit rules in at least one folder to write files to arbitrary locations writable by the site user via crafted node roles in the "Exclude nodes based on their role" rule option, leading to code execution as the site user.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121374
https://checkmk.com/werk/17994
https://github.com/advisories/GHSA-p25x-4jr8-p5mr