CERT24CVE-2026-103674 — NetApp ONTAP special agent exposes password in process listLoading data…
CERT24Threat Observatory
Period

CVE-2026-103674 — NetApp ONTAP special agent exposes password in process list

In Checkmk version 2.5.0 before 2.5.0p16, invoking the NetApp ONTAP special agent may place the login password on the command line. A local user on the Checkmk server can read the password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.

← Back to intelligence

CVE-2026-103674 — NetApp ONTAP special agent exposes password in process list

In Checkmk version 2.5.0 before 2.5.0p16, invoking the NetApp ONTAP special agent may place the login password on the command line. A local user on the Checkmk server can read the password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.