CVE-2026-31836— Checkmate 授权问题漏洞

Mass Assignment Privilege Escalation in Checkmate

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any authenticated user to escalate their privileges to superadmin, bypassing all role-based access controls. An attacker can modify their user role to gain complete administrative access to the application, including the ability to view all users, modify critical configurations, and access sensitive system data. At time of publication, there are no publicly available patches.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

授权机制不恰当

Checkmate 授权问题漏洞

Checkmate是BlueWave开源的一个开源、自托管的工具，旨在通过精美的可视化实时跟踪和监控服务器硬件、正常运行时间、响应时间和事件。 Checkmate 3.5.1及之前版本存在授权问题漏洞，该漏洞源于用户配置文件更新端点存在大规模分配漏洞，可能导致任何经过身份验证的用户将其权限提升为超级管理员。

N/A

N/A