CVE-2024-13723 Checkmk NagVis Remote Code Execution
An authenticated administrator can upload a malicious PHP file to Checkmk NagVis to achieve remote code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-13723?
CVE-2024-13723 is a high-severity vulnerability in Checkmk NagVis, published on 4 Feb 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
Weakness: CWE-434
Which versions are affected by CVE-2024-13723?
How do I fix CVE-2024-13723?
Apply the vendor's patch.
Is CVE-2024-13723 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-13723 exists.
Sources
Also known as DEBIAN-CVE-2024-13723, GHSA-vg5c-jm85-v84v, UBUNTU-CVE-2024-13723.