This vulnerability in Checkmk before version 2.5.0b4 arises from improper input sanitization in the monitoring quicksearch's search filter plugins, enabling an authenticated user to perform livestatus command injection. The flaw is categorized under CWE-140 (Improper Neutralization of Delimiters) and has a CVSS 4.0 base score of 5.3, indicating medium severity. The vulnerability requires low privileges and no user interaction but has low impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Checkmk GmbH as of the publication date.

An authenticated attacker with low privileges can inject livestatus commands via the quicksearch feature, potentially manipulating monitoring queries or data returned by livestatus. The impact is rated medium with limited confidentiality, integrity, and availability effects. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the monitoring quicksearch feature to trusted authenticated users only and monitor for unusual query patterns. Avoid exposing the affected versions to untrusted users.