Live › vulnerability › CVE-2026-113461
Go to dashboardCheckmk 2.5.0p14 has a local privilege escalation in its mk-oracle agent plugin. A local user who can write to the Oracle client library directory or the oratab file can run code as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Hosts running the Checkmk agent with the mk-oracle plugin enabled on Checkmk 2.5.0p14, where an Oracle home is listed in oratab. The attacker must already have a local account with write access to the Oracle client library directory or to oratab. Hosts without the mk-oracle plugin or without Oracle homes in oratab can skip it.
No product ranges from the sources yet.
omd version or the Checkmk package version, to see whether it is 2.5.0p142.5.0p14 to a release that carries the fix (the exact fixed version is unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
This page as .md · .json · in your agent: get_signal("CVE-2026-113461")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.