CVE-2025-32917 | Checkmk up to 2.1.0p49/2.2.0p41/2.3.0p31/2.4.0b6 jar_signature Agent Plugin JAVA_HOME/bin uncontrolled search path

A vulnerability, which was classified as critical, has been found in Checkmk up to 2.1.0p49/2.2.0p41/2.3.0p31/2.4.0b6. Affected by this issue is some unknown functionality of the file JAVA_HOME/bin of the component jar_signature Agent Plugin. The manipulation leads to uncontrolled search path.

This vulnerability is handled as CVE-2025-32917. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.