CVE-2025-24016

Wazuh Server Deserialization of Untrusted Data Vulnerability

Wazuh

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge…

10. Feb 2025

Ausgewertete Quellen

• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016
• CISA
  Wazuh Server Deserialization of Untrusted Data Vulnerability
• NVD
  CVE-2025-24016
• GitHub
  https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh