Description
Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the authentication daemon.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wazuh | Wazuh | 3.5.0 – ≤ 4.3.10 | — |
Advisories 1
- WID-SEC-2026-0908 Wazuh: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 29, 2026
References
- GitHub Security Advisory (GHSA-grjq-p5fg-m24r) vendor-advisory
- https://www.vulncheck.com/advisories/heap-buffer-overflow-in-wazuh-authd third-party-advisory