What’s Vulnerable › Vulnerabilities
CVE-2025-65000: Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-18 · updated 2026-10-13
- Weakness: CWE-212
Description
SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.
Affected products
- Checkmk GmbH Checkmk: 2.2.0, 2.3.0, 2.3.0-b1, 2.3.0-b2, 2.3.0-b3, 2.3.0-b4 (+68)
References
Get alerted when CVE-2025-65000 or the next vulnerability affects your stack