CVE-2025-62791

HIGH

Wazuh < 4.11.0 - Denial of Service via Crafted Agent Message

Title source: llm

Description

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat() implementation does not check the return the value of cJSON_GetObjectItem() for a possible NULL value in case of an error. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://github.com/wazuh/wazuh/security/advisories/GHSA-gcwf-6p6m-gvm7

Scores

CVSS v3 7.5

EPSS 0.0027

EPSS Percentile 18.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-252 CWE-476

Status published

Products (1)

wazuh/wazuh < 4.11.0

Published Oct 29, 2025

Tracked Since Feb 18, 2026