Wazuh Agent vulnerabilities
3 known vulnerabilities in Wazuh Agent from Wazuh. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
wazuh-agent: Incorrect Authorization
Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controlling a manager can write unsigned policy files to var/incoming via the upgrade ch
- 7.2 High severity
wazuh-agent: Improper Control of Generation of Code
Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild
- 7.2 High severity
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an…
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account Net