Arbitrary file write via injected vcrtrace

Argument injection in affected Checkmk releases allows remote authenticated users to write arbitrary files through special-agent settings. Some check and special-agent configurations pass attacker-controlled options to a command line, where injected --vcrtrace writes captured HTTP traffic to an unvalidated path. Authenticated access to the affected configuration is required, and the write is limited to traffic captured by the invoked check or agent.