CVE-2025-58124 Lack of TLS validation in plugin check-mk-api on Checkmk Exchange
Attackers in a Man-in-the-Middle position can intercept traffic due to missing TLS validation in the check-mk-api plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-58124?
CVE-2025-58124 is a medium-severity vulnerability in heinlein-support:check_mk_python_api, published on 28 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic.
Weakness: CWE-295
Which versions are affected by CVE-2025-58124?
It affects 1 product.
Products include Heinlein-Support Check Mk Python Api.
How do I fix CVE-2025-58124?
No fix has been published for CVE-2025-58124 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-58124 being exploited?
There is no known exploitation of CVE-2025-58124 in the wild and no public exploit code.
Other vulnerabilities in heinlein-support:check_mk_python_api
Sources
Also known as GHSA-mj3w-6w57-pmww.