| Package | Affected versions | Patched versions |
|---|---|---|
| wazuh | ≥ 4.0.0, < 4.14.3 | 4.14.3 |
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE) vulnerability due to Deserialization of Untrusted Data). All Wazuh deployments using cluster mode (master/worker architecture) and any organization with a compromised worker node (e.g., through initial access, insider threat, or supply chain attack) are impacted. An attacker who gains access to a worker node (through any means) can achieve full RCE on the master node with root privileges. Version 4.14.3 fixes the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free