This vulnerability (CVE-2026-92882) affects Checkmk's REST API in versions before 2.5.0p15, 2.4.0p37, and 2.3.0p51, as well as version 2.2.0. It allows an authenticated user with read access to host configurations to extract sensitive credentials in clear text from API GET responses. These credentials include SNMP community strings, SNMPv3 authentication and privacy passphrases, and IPMI passwords. The issue arises because the API endpoints do not sufficiently protect these credentials, despite the setup GUI not displaying them. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required beyond authenticated read access, and low impact on confidentiality, integrity, and availability.

An authenticated user with permission to view host configurations can access sensitive credentials in clear text, potentially leading to unauthorized access to SNMP and IPMI interfaces. However, the impact is limited by the requirement for authenticated access and the low CVSS score reflects the limited severity of this exposure.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the REST API and host configuration views to trusted users only to minimize exposure.