{"id":"CVE-2025-24016","kind":"vulnerability","aliases":["CVE-2025-24016"],"related":[],"title":"Wazuh is a free and open source platform used for threat prevention, detection, and response","description":"Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.","summary":"Wazuh Server has a deserialization flaw in which untrusted data is parsed unsafely. An attacker who can reach the server can run code on it.","severity":"critical","cvss":9.9,"epss":null,"exploited":true,"exploited_at":"2025-06-10T00:00:00+00:00","products":[{"name":"Wazuh Wazuh Server","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"wazuh","fixed":["4.9.1"],"affected":">= 4.4.0, < 4.9.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","other","self-hosted","wazuh"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the vendor mitigation; CISA says to follow vendor instructions or discontinue use if none exist. Fixed version: unknown.","status":"open","published_at":"2025-02-10T20:15:42+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:46:56+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-23T20:46:56Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigation; CISA says to follow vendor instructions or discontinue use if none exist. Fixed version: unknown.","reach":"network","summary":"Wazuh Server has a deserialization flaw in which untrusted data is parsed unsafely. An attacker who can reach the server can run code on it.","category":"other","who_cares":["wazuh","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs remote code on the Wazuh server","analyst_note":"Find the vendor advisory and affected/fixed Wazuh versions, the mitigation steps, and whether authentication is required; check the CISA KEV entry for the due date.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000411,"input_tokens":2530,"output_tokens":316,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2025':17A,20A '-24016':18A,21A '4.4.0':73C '4.9.1':78C,159C 'access':140C 'agent':157C 'allow':83C 'anybodi':137C 'api':139C 'arbitrari':128C 'attack':46B,108C 'certain':151C 'cluster':148C 'code':54B,86C,130C 'compromis':141C,156C 'configur':152C 'contain':160C 'cve':16A,19A 'dapi':116C 'dashboard':142C 'data':41B 'deseri':36B,81C,99C 'detect':13A,67C 'dictionari':114C 'distributedapi':91C 'evalu':127C 'even':153C 'exc':125C 'except':123C 'execut':87C 'exploit':26B 'fix':162C 'flaw':37B 'forg':120C 'framework/wazuh/core/cluster/common.py':105C 'free':4A,58C 'host':30B 'inject':111C 'json':97C 'manag':109C 'object':103C 'open':6A,60C 'paramet':92C 'pars':43B 'platform':8A,62C 'prevent':12A,66C 'prior':75C 'python':129C 'reach':49B 'remot':85C 'request/response':117C 'respons':15A,69C 'run':53B 'self':29B 'self-host':28B 'serial':95C 'server':24A,33B,51B,90C,145C 'sourc':7A,61C 'start':70C 'threat':11A,65C 'trigger':135C 'unhandl':122C,124C 'unsaf':44B,80C 'unsanit':113C 'untrust':40B 'use':9A,63C,100C 'version':72C,77C,158C 'vulner':82C,132C 'wazuh':1A,22A,23A,25A,31B,32B,55C,89C,102C,144C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-02-10T20:15:42+00:00","kev":{"dateAdded":"2025-06-10","dueDate":"2025-07-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-24016","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24016","severity":null,"published_at":"2025-06-10T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:22+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-24016","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24016","severity":null,"published_at":"2025-02-10T20:15:42+00:00","modified_at":"2026-06-17T08:57:53+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}