CVE-2024-47091: Checkmk

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' (or with write access to a binary referenced by such a service) to execute arbitrary code in the context of the Checkmk agent service, which typically runs as SYSTEM.

Affected products

• Checkmk Checkmk: version 2.2.0 only; version 2.3.0 only; version 2.4.0 only

Published 2026-05-13. Last modified 2026-06-17.