{"id":"CVE-2026-111573","published":"2026-11-06T16:17:37.723","lastModified":"2026-11-10T15:17:12.377","description":"Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-277"],"vendors":[],"products":[],"references":[{"url":"https://checkmk.com/werk/19231","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}