CVE-2026-25769
CRITICAL 9.1EPSS 8.8%
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE) vulnerability due to Deserialization of Untrusted Data). All Wazuh deployments using cluster mode (master/worker architecture) and any organization with a compromised worker node (e.g., through initial access, insider threat, or supply chain attack) are impacted. An attacker who gains access to a worker node (through any means) can achieve full RCE on the master node with root privileges. Version 4.14.3 fixes the issue.
- CVSS v3.1
- 9.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- 8.79% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2026-03-17
- Updated
- 2026-03-18
Proof-of-concept exploits (2)
- Samres27/CVE-2026-25769---CVE-2026-257700★ · 2026-05-01
- 0xBlackash/CVE-2026-257690★ · 2026-04-13