CVE-2026-31836

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any authenticated user to escalate their privileges to superadmin, bypassing all role-based access controls. An attacker can modify their user role to gain complete administrative access to the application, including the ability to view all users, modify critical configurations, and access sensitive system data. At time of publication, there are no publicly available patches.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-6368-x7wr-wpm2	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:bluewavelabs:checkmate:*:*:*:*:*:*:*:*

History

30 Mar 2026, 14:35

Type	Values Removed	Values Added
References	~~() https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-6368-x7wr-wpm2 -~~	() https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-6368-x7wr-wpm2 - Exploit, Vendor Advisory
First Time		Bluewavelabs checkmate Bluewavelabs
CPE		cpe:2.3:a:bluewavelabs:checkmate::::::::

Information

Published : 2026-03-20 18:16

Updated : 2026-03-30 14:35

NVD link : CVE-2026-31836

Mitre link : CVE-2026-31836

CVE.ORG link : CVE-2026-31836

JSON object : View

Products Affected

bluewavelabs

checkmate

CWE

CWE-269

Improper Privilege Management

CWE-285

Improper Authorization

{"id": "CVE-2026-31836", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "published": "2026-03-20T18:16:13.540", "references": [{"url": "https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-6368-x7wr-wpm2", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any authenticated user to escalate their privileges to superadmin, bypassing all role-based access controls. An attacker can modify their user role to gain complete administrative access to the application, including the ability to view all users, modify critical configurations, and access sensitive system data. At time of publication, there are no publicly available patches."}, {"lang": "es", "value": "Checkmate es una herramienta de c\u00f3digo abierto y autoalojada dise\u00f1ada para rastrear y monitorear el hardware del servidor, el tiempo de actividad, los tiempos de respuesta y los incidentes en tiempo real con hermosas visualizaciones. En versiones desde la 3.5.1 y anteriores, una vulnerabilidad de asignaci\u00f3n masiva en el endpoint de actualizaci\u00f3n del perfil de usuario de Checkmate permite a cualquier usuario autenticado escalar sus privilegios a superadministrador, eludiendo todos los controles de acceso basados en roles. Un atacante puede modificar su rol de usuario para obtener acceso administrativo completo a la aplicaci\u00f3n, incluyendo la capacidad de ver a todos los usuarios, modificar configuraciones cr\u00edticas y acceder a datos sensibles del sistema. En el momento de la publicaci\u00f3n, no hay parches disponibles p\u00fablicamente."}], "lastModified": "2026-03-30T14:35:01.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bluewavelabs:checkmate:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7F58CAA-914A-4C3B-8E92-E137225D9620", "versionEndIncluding": "3.5.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}