The NagVis component within Checkmk contains a remote code execution vulnerability. An attacker with administrative privileges can upload a malicious PHP file and modify settings to execute it. This flaw allows full compromise of the affected system.