openITCOCKPIT Blog

openITCOCKPIT Agent 3.6.0 and openITCOCKPIT 5.5.2 released

14.04.2026
5.5.2 stable

We have released the openITCOCKPIT Monitoring Agent 3.6.0 and openITCOCKPIT 5.5.2!

openITCOCKPIT Agent 3.6.0

Add support for Windows on ARM64

With version 3.6.0, the openITCOCKPIT Agent now also supports Windows on ARM64 devices. Please use the openitcockpit-agent-3.6.0-arm64.msi installer.

Add Homebrew package inventory support for macOS

With version 3.6.0, the openITCOCKPIT Agent can now also check and query alternative or third party package managers. Currently only Homebrew on macOS is supported, but more package manager and operating systems may be added in the future.

By default, this is disabled and can be enabled by setting the following option in the config.ini file:

# By enabling this option the openITCOCKPIT Monitoring Agent will also check
# and query alternative or third party package managers.
# Currently supported alternative package managers are:
# - macOS: brew
enable-alternative-packagemanagers = False

Many thanks to lubeschanin for contributing this feature!

Remove references to it-novum

As you know, openITCOCKPIT got developed by it-novum for many years, but have been acquired by Allgeier IT Services in summer 2025, which got renamed to AVENDIS a few weeks ago. With this release, we have removed all references to it-novum in the openITCOCKPIT Agent.

This change only affects Windows and macOS users.

Windows

The new default installation path for the openITCOCKPIT Agent on Windows is: C:\Program Files\openitcockpit\openitcockpit-agent. If you have the openITCOCKPIT Agent already installed, it will not be automatically moved to the new location during the update process. Instead all files will remain in the old location C:\Program Files\it-novum\openitcockpit-agent.

In case you want to move the openITCOCKPIT Agent to the new location, please create an backup of the files:

  • auth.json (Push Mode only)
  • agent.crt (Pull Mode only)
  • agent.csr (Pull Mode only)
  • agent.key (Pull Mode only)
  • config.ini
  • customchecks.ini
  • prometheus_exporters.ini
  • server_ca.crt (Pull Mode only)

Uninstall the openITCOCKPIT Agent through the Windows Control Panel and install the new version. It will be installed in the new location. After the installation, copy the backup files to the new location and restart the openITCOCKPIT Agent service.

macOS

On macOS, only the service label has been changed from com.it-novum.openitcockpit.agent to io.openitcockpit.agent. This change will be applied automatically during the update process.

The new launchctl commands are:

sudo launchctl stop io.openitcockpit.agent
sudo launchctl start io.openitcockpit.agent

Legacy command before version 3.6.0:

sudo stop com.it-novum.openitcockpit.agent
sudo start com.it-novum.openitcockpit.agent

Updates and bug fixes

This update also contains a update of the underlying libraries and some bug fixes. For a complete list please see the changelog.

openITCOCKPIT 5.5.2

Security fixes

The GitHub User h00die-gr3y reported another security vulnerability in openITCOCKPIT, which we have fixed in this release. We would like to thank h00die-gr3y for responsibly disclosing these issues to us.

  • CVE-2026-24893 Security: Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion

The vulnerability is about the fact, that the fields Host name and Host address could be used to inject commands into the check command, which will than be executed by the monitoring engine as user nagios. While this is more a design decision of how Naemon (and Nagios in general) work and handle macros, we decided to enable an option by default, which will prevent writing potentially dangerous characters into these fields.

This has a very low potential of breaking existing configurations. The option is called FILTER_NAME_AND_ADDRESS_IN_CFG and can be found in the System Settings of openITCOCKPIT. By default, this option is enabled, but can be disabled if required.

This change will affect the following macros:

  • $HOSTDISPLAYNAME$
  • $HOSTADDRESS$
  • $SERVICEDISPLAYNAME$

Update Agent Wizard

openITCOCKPIT 5.5.2 is not required for the openITCOCKPIT Agent 3.6.0, but we have updated the Agent Wizard in openITCOCKPIT to support the new path and launchctl service label for the openITCOCKPIT Agent on Windows and macOS.

For backwords compatibility, openITCOCKPIT will also show the old path and launchctl service lables for a while.

EventcorrelationModule: Summary event correlations widget

When the EventcorrelationModule is installed on your system, you can now add a new widget to your dashboard, which will show a summary of all event correlations and their current state. This will give you a quick overview if there there are any outages or problems in your environment.

The widget also provides a variety of filters.

Changelog

For a complete list of new features, bug fixes, and improvements, please see the changelog.

How to Update

Please see the official documentation for instructions on how to update openITCOCKPIT.

Your openITCOCKPIT Team

More posts