Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-103674— NetApp ONTAP special agent exposes password in process list

Quick assessment

Affected
Checkmk GmbH Checkmk
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Checkmk 2.5.0 版本（早于 2.5.0p16）中，当通过命令行以明文登录密码调用 NetApp ONTAP 专用代理时，Checkmk 服务器上的本地用户可在该专用代理运行期间，通过查看进程列表读取到 NetApp 的登录密码。此漏洞同时影响显式配置的密码以及从密码存储中读取的密码。

CVSS 2.0 · Low EPSS 0.10% · P1

Possible ATT&CK Techniques 1 AI

T1056.004 · Credential API Hooking

Affected Version Matrix 1

VendorProduct Version RangeStatus
Checkmk GmbH Checkmk 2.5.0< 2.5.0p16 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-103674

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NetApp ONTAP special agent exposes password in process list
Source: CVE Program / CVE List V5
Vulnerability Description
Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过处理环境导致的信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Checkmk GmbH Checkmk 2.5.0 ~ 2.5.0p16 -

II. Public POCs for CVE-2026-103674

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-103674

请登录查看更多情报信息。

Vendor Pages for CVE-2026-103674 (1)

Same Patch Batch · Checkmk GmbH · 2026-11-06 · 3 CVEs total

CVE-2026-111573 6.3 MEDIUM Privilege escalation via unprotected Windows agent data folder
CVE-2026-103682 2.0 LOW Jolokia special agent exposes password in process list

IV. Related Vulnerabilities

Same product: Checkmk
Same vendor: Checkmk GmbH
Same weakness: CWE-214