Database/Control plane, storage & DevOps
Checkmk Kubernetes special agent: argument injection via node-role rule gives code execution as site user
Impact
A Checkmk user who can edit rules in any single folder can put crafted node roles in the Kubernetes special agent's "Exclude nodes based on their role" option. That lets them write files anywhere the site user can write, and from there run code as the site user. The site user on a monitoring server usually holds credentials for everything it watches, including the Kubernetes API tokens for the GPU clusters. So a low-privileged monitoring editor can become the monitoring server, and gets its stored secrets with it.
Who can reach it
Authenticated Checkmk user with rule-edit permission on at least one folder, over the network to the Checkmk web UI.
What to do
Upgrade Checkmk to 2.5.0p19 or 2.4.0p40 or later and restart the site. 2.3.0 is end of life and will not get a fix, so migrate off it. Until then, review who has rule-edit rights and rotate the Kubernetes credentials stored in Checkmk if misuse is suspected.
References
Related entries
- OpsTree BuildPiper: unrestricted Additional Manifests let project users gain Kubernetes cluster-adminCVE-2026-127073 · OpsTree BuildPiper (Additional Manifest pipeline feature)Critical
- OpsTree BuildPiper: unrestricted hostPath volumes let deploy users mount the worker node root filesystemCVE-2026-127080 · OpsTree BuildPiper (Define HostPath Volume deploy configuration)Critical
- GitLab: an unauthenticated GraphQL directive can modify or delete public projects and user dataCVE-2026-19478 · GitLab CE/EE (GraphQL API directive handling)Critical
- Apache Polaris: wildcards in table names widen vended S3 credentials to other tablesCVE-2026-42810 · Apache Polaris (S3 delegated-credential policy generation)Critical
- CloudNativePG: a database owner escalates to PostgreSQL superuser and OS command execution in the podCVE-2026-55769 · CloudNativePG instance manager (unpinned search_path on superuser connections)Critical
- Gitea act_runner: workflow container options bypass privileged:false and escape to the hostCVE-2026-58053 · Gitea act_runner Docker backend (workflow container.options handling)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.