This vulnerability involves improper neutralization of delimiters in Checkmk's monitoring quicksearch feature before version 2.5.0b4. Authenticated users can inject livestatus commands through crafted search queries because the input sanitization in search filter plugins is insufficient. This could lead to unintended command execution within the livestatus interface. The CVSS 4.0 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, and low privileges required. No official fix or patch has been documented yet, and the product is not a cloud service.

An authenticated attacker with low privileges can inject livestatus commands via the quicksearch feature, potentially leading to unauthorized command execution or data manipulation within the monitoring system. The impact is limited by the requirement for authentication and the medium CVSS score. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the monitoring quicksearch feature to trusted authenticated users only and monitor for unusual activity related to livestatus commands. Avoid exposing the affected versions to untrusted networks.