CVE-2026-7485

Checkmk versions prior to 2.5.0p2, 2.4.0p29, 2.3.0p47, and all 2.2.0 are vulnerable due to incorrect authorization in frozen BI aggregations, allowing authenticated users with limited visibility to access the names and existence of restricted hosts and services. This could lead to information disclosure, potentially aiding in further attacks or reconnaissance efforts. Organizations using affected versions should prioritize remediation to mitigate unauthorized information exposure.