CVE-2025-39664

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39664
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39664.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39664
Downstream
Published
2025-10-09T15:16:06.363Z
Modified
2026-03-14T12:46:01.859326Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.

References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
6a686961c4b760c55a13cfdb61e7c02be832a0be
Fixed
d6049cd2d82eba3842b30c305912b9e946842463
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d181fbfbfbc98415313b4cb0ad96ded5ddd7abd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
324bd38f5b76f73f236e495af0c9228b65d15528
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0d2681c53226611c965c0d94ff233e497b5a4317
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5cf0476d6b0cba20b3aafb01b187c63a9fda92bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5554a04b2c158ae9b0e01ef1b591fe3702ea5ac0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eda43696c54223b7b5fdcf3f4c3a44ab841061fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4cbff4e1a0ac90dc4d91939fc63184a0fcc0c3da
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
89df3c399664ac47711f628042b180222de1580d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a194cdc9f337ef68e31af63eedf88054f7fddc1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
35f34b0cf3e832750898c365d1a492f7b76a4c6e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
996ca03a86e23025fe7544b47005043ae6be9084
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9da425b482f2e430343b235449ff33114bf4ddc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22de8967ee57635f022996260036f7059c359d77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2bc11315273eb7bdbd3ca42f4d726527b204519e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
65236b565e0f57dd058f395704b20154aff30847
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b6b3d5d682a04ac1de9f5a7e6aab4bec9529562c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a889f51a7d8216e1ac9b9db00637ae8179a0dd53
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c91ffa81b3cb743d0f8aafb8b18a63e77d971096
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
991ffeda722dc12d049c3dd7a667cb5ef08a8fc7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
93590d801961d180c7958a478839a07b2cbb1d77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
603bd98e26ab35ce5126fee36c84778170869878
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8476719e4cb80a4eb715c99f1347d9ee89ea6e5a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
becdac05f934c40103587ed74c310e4d207c67cf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a656430461523e83e2a5e4a0441179c665de48f5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f56f395c4845647b1fd0696858c094d26c006f27
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e176f520feaf70551cd267160af3fa0a0892bba9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a40798baaa368f91abe144ec3fab19a59aa7131b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6adccae6bcc31602511d6738750b9c7fdf6c5c07
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4330efc35fa2272b65fa9d09edf59a0ecaa9fd8a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00a2dea04590d89a2ba41c8b8b979264d094b97d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a9f01eaebaa33dd83008b72d3a7f54321d42b73
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
799bb40e533f7ff689d1f362db233711fe4470c5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b50c9d3c1e06ca5c93d65ffc07b08eedf98a414
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d83a943078c6f95b5b4f5e2fe738926fce0e409
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
420ecb06c3ff369b8ec9b8344aa81f53bb80a309
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2522280ea78e94add7bd54d27e8589a320451958
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
86ef1f841409dcbe03a00faa680784aa76704f17
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5a9ed82c6f3115b7aaa46c6aa1b63953d8d5ce5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d85a2e5143ecba3b73784a9825264d0a576382b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d4289fb7f58f6387d62713179131946f44a9aa69
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2607dde3dd4fcaf3357df418f83060293bed122
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
07125838894d877a8f3c6110dc28ec40ba9fff8f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
779a2941a075e1461b45407f715176524414b994
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
774354b2551f8e27948fc4cebfc950ee81d28e0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b78272d604bfda3f7954ae5cec8ff3e3fddc5cf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
72fdb481b2f673c5a80d56cfec3dffa598195a0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a6aaa241192f2257300a50839bf7423b335b7771
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
418c120db01cb5030ac6d51e2b54b5277e44738b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a5fbb41e2f4568843e01625799cedbfd753373c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
257af35825115a122e4100973d840c041ea3edf5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b765e39ffb10efc5bf5908857708269530c279b9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e13705010f4fc8edd4fbd6165929c9711af3ec6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ef9f4eb93199860e6228f6ed61b4839dac08897d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4477439987a148bcf3aa82fa9603f814b63be789
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ba483a2e011b281853e3d4789c7f77d5bd2915c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
570a45d3057c0e93d578023268ad80adcca0b3f9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c35d3f8bb42581be37e1c127e24db33cb3b21b9c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc70c4960fd683bcc20c932fa4fc9dfb5603c823
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c48f224bdb7455b977ddf276b68a8b485e781951
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b059bcabaa18a351f410f73b07cc86b877d54dcd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63a5c86fcf61869353ff6334cc5d3215ad8a279a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d30336dfdd1f9587f4be5dab21b4cb8e6f174683
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d932b6ef60b2ff46bd38576f355411d40a4e6b0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2dd54a1897a230eabd6176c95a83391ba3e5420
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0a8e4f2502496b7991a330c5aea61196c023a2bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fd541d4d7d95668dd33d61bc16fa8df17f4affcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9a9f01f52a3dbf900cadf984cd274f1bcd463232
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6fdb329ff5c707e469c622dce532ecf61cc7aec1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c9a97371302282f2f7554f3d8b48eca91a6e082
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b68be456036a63c34633d33e9231a5930e253b7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3fa6f784f929a7d79248e0b212a238e0328d2942
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a1ade8ba564934cabb92903f49190ee73c6e94b3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8b9812eceee2177dc6fa389a3e13f09fcd67392b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b759adfe10b408d26d86ab1a16cb7dbd1eb18ada
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1fc0aea14b848c3d4eaf779a42ac59e3af0e8df6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3c7ace5f5f48c54974558e49f4a088735be56a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4dabbfb583bb1e70b3257a8a3fc7bcdacaf8b4e9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f93c345b2ef1435d51333d3593a6b1701d5c249c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
241e7e776b96d316693575e91023518e20e171be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4abde4a41de677e103561e4fb75b81f6ee8b80dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4807b162eabc6da5accf1391ddd4c35dc964f904
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
407df5847db1227bee188f0d81929351616da740
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ef5a23e8333efd927f110e0d35ee501d6f02031
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e167463fc0836b6d90a444854ffcc8ac99aa9603
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ad0758a3c7d5c68ceb2b561cc099d5b0dcf84170
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a314c586cd7a3ebb27029427654d0bea50db5452
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cf744b214554060204275d22fad1dd92e8f61fa9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
241a54afaa485f507682f43e4ca5ed8c36c85c22
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a09b9121bd499fd38d2167004089f0da782d68a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
365b53739e47f81c0e8b55934b6d9f59ddb39cf7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4ca27fe3f410af7eded09e0809d06066390ce0d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
df508000718009a401a35af049c246997421bdba
Database specific 
{
    "versions": [
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "2.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p38"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p39"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p41"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p42"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p43"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p44"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p45"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-p9"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39664.json"