Livestatus Injection in Checkmk Quicksearch Allows Command Injection

Executive Summary

CVE-2026-33455 is a Livestatus injection vulnerability found in the monitoring quicksearch feature of Checkmk versions prior to 2.5.0b4. It allows an authenticated attacker to inject Livestatus commands through the search query because the input sanitization in the search filter plugins is insufficient.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an authenticated user to execute unauthorized Livestatus commands via the search query, potentially leading to manipulation or unauthorized access to monitoring data within Checkmk. Although classified as trivial in severity, it could compromise the integrity of monitoring operations.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update Checkmk to version 2.5.0b4 or later, or 2.6.0b1 or later, where the issue has been fixed.

The security update is fully compatible and requires no manual intervention.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify how the Livestatus injection vulnerability in Checkmk affects compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0