CVE-2023-31208: Checkmk

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.

Affected products

• Checkmk Checkmk: version 2.0.0 only; version 2.1.0 only; version 2.2.0 only
• TRIBE29 Checkmk: before 2.0.0 (fixed in 2.0.0)

Published 2023-05-17. Last modified 2026-06-17.