Werk #20006: Remove SQLite3 from the Windows agent's Python
| Component | Agent bakery | ||
| Title | Remove SQLite3 from the Windows agent's Python | ||
| Date | Jul 22, 2026 | ||
| Level | Trivial Change | ||
| Class | New Feature | ||
| Compatibility | Incompatible - Manual interaction might be required | ||
| Checkmk versions & editions |
|
The Python interpreter shipped with the Windows agent (via the "Install Python runtime environment" bakery rule) included a sqlite3.dll.
SQLite had some vulnerabilities in the past and therefore vulnerability scanner detected this DLL.
None of the standard plugins of Checkmk use SQLite therefore these vulnerabilities were not exploitable in practice.
To avoid this noise, we are now actively removing SQLite and its DLLs.
If you have custom plugins that use SQLite you now need to install your own Python runtime.