Werk #19712: omd restore: Fix inverted vulnerability warning for Werk #18891
| Component | Site management | ||||||
| Title | omd restore: Fix inverted vulnerability warning for Werk #18891 | ||||||
| Date | Jul 8, 2026 | ||||||
| Level | Trivial Change | ||||||
| Class | Bug Fix | ||||||
| Compatibility | Compatible - no manual interaction needed | ||||||
| Checkmk versions & editions |
|
When restoring a backup that was created with a different Checkmk version, omd restore re-executes the omd command of that version. If that version is still vulnerable to the privilege escalation described in Werk #18891 (CVE-2025-39666) and the restore is executed as root, a warning is supposed to be printed to point you to the required updates.
Due to an inverted condition, the warning appeared in exactly the opposite situations: it was shown when the target version was already patched, or when the restore was executed as a site user (where the vulnerability cannot be triggered). Meanwhile the actually dangerous case — running omd restore as root with a backup from a vulnerable version — produced no warning at all.
The warning is now only printed when the backup's version is missing the fix for Werk #18891 and omd restore is executed as root.