Summary
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.
Product
Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.
Vulnerabilities 2
-
Critical 9.3
Wazuh GitHub Actions Shell Injection via Fork Pull Request
Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environmen…
-
Medium 6.3
Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync
Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileg…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-08-02
https://github.com/advisories/GHSA-V7QC-FPQM-P46F
-
GitHub Advisory Database vom 2026-08-02
https://github.com/advisories/GHSA-9CHJ-CP8J-3C5F
-
EU Vulnerability Database vom 2026-08-02
https://euvd.enisa.europa.eu/enisa/EUVD-2026-51833
-
EU Vulnerability Database vom 2026-08-02
https://euvd.enisa.europa.eu/enisa/EUVD-2026-51853