This vulnerability in Checkmk involves an untrusted search path that enables local privilege escalation. Specifically, a site user can manipulate files within the site context that are processed by the `omd` command executed by root, resulting in escalation to root privileges. Affected versions include Checkmk 2.2.0 (EOL), 2.3.0 prior to 2.3.0p46, 2.4.0 prior to 2.4.0p25, and 2.5.0 beta before 2.5.0b3. The CVSS 4.0 base score is 9.3, indicating a critical severity with high impact on confidentiality, integrity, availability, and scope. The vendor has not yet provided an official fix or remediation guidance, and no known exploits have been reported.

Successful exploitation allows a local site user to escalate privileges to root, potentially compromising the entire system. This could lead to full system control, unauthorized access to sensitive data, and disruption of services. The vulnerability affects multiple versions of Checkmk, including an end-of-life version, increasing risk for unpatched deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local user access to trusted personnel only and avoid running the `omd` administrative command in environments where untrusted users have site-level access. Monitor vendor communications for updates on patches or official mitigations.