CVE-2025-64997

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Dec 18, 2025

CISA due date

—

The record

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure.

Affected packages

Ecosystem	Package	Introduced	Fixed