Skip to content
OpenAdvisories

Product · wazuh

wazuh-agent

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-74030

    Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion

    Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the manager can push a small SCA policy with nested aliases via…

    wazuh wazuh-manager wazuh-agent
  • Medium 6.7
    CVE-2025-15616

    Wazuh Agent and Manager OS Command Injection and Untrusted Search Path

    Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, mail…

    wazuh wazuh-manager wazuh-agent