{"id":"CVE-2026-112341","kind":"vulnerability","aliases":["CVE-2026-112341"],"related":[],"title":"Wazuh: SQL injection lets a low-privilege user read every agent's key","description":"Wazuh versions from 4.0.0 before 4.14.9 contain a sql injection vulnerability in WazuhDBBackend._substitute_params due to sequential regex placeholder cross-contamination. Authenticated users with agent:read on one agent can inject UNION SELECT via the q and search parameters to extract every agent's internal_key through a blind boolean oracle on total_affected_items.","summary":"Wazuh versions from 4.0.0 before 4.14.9 have a SQL injection flaw in the WazuhDBBackend parameter handling. An authenticated user with agent:read on a single agent can use it to extract every agent's internal key.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","siem","wazuh"],"not_affected_if":["no-agent-read-users","version-4.14.9-or-later"],"how_to_check":"- Check the installed Wazuh version on the manager (for example with `/var/ossec/bin/wazuh-control info`, if the sources' guidance applies to your install), and compare it against `4.14.9`.\n- Confirm whether any users hold the agent:read permission through the Wazuh API RBAC settings.","fix":"- Wazuh: move to `4.14.9` or later, per the release notes linked from the sources.","status":"open","published_at":"2026-11-06T15:17:08+00:00","first_seen_at":"2026-11-06T15:42:43+00:00","triaged_at":"2026-11-06T15:44:20+00:00","updated_at":"2026-11-06T15:44:20+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-06T15:44:20Z","model":"claude-haiku-5-5","output":{"fix":"- Wazuh: move to `4.14.9` or later, per the release notes linked from the sources.","reach":"network","title":"Wazuh: SQL injection lets a low-privilege user read every agent's key","impact":"medium","summary":"Wazuh versions from 4.0.0 before 4.14.9 have a SQL injection flaw in the WazuhDBBackend parameter handling. An authenticated user with agent:read on a single agent can use it to extract every agent's internal key.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["wazuh","self-hosted","siem"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker extracts every agent's internal key via SQL injection.","analyst_note":"Confirm the exact affected range and the fixed version in the vendor advisory and release notes linked from the sources; check whether the parameter injection requires any non-default configuration.","how_to_check":"- Check the installed Wazuh version on the manager (for example with `/var/ossec/bin/wazuh-control info`, if the sources' guidance applies to your install), and compare it against `4.14.9`.\n- Confirm whether any users hold the agent:read permission through the Wazuh API RBAC settings.","plain_action":"","needs_analyst":true,"not_affected_if":["version-4.14.9-or-later","no-agent-read-users"],"who_is_affected":"Teams running a Wazuh manager between 4.0.0 and 4.14.9 where some users hold the agent:read permission through the API. The attacker needs valid credentials, so exposure is limited to authenticated API users, but any such user can read every agent's internal key. Installations on 4.14.9 or later, or with no authenticated users beyond administrators, are less exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000759,"input_tokens":4323,"output_tokens":653,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-112341':17A,20A '-2026':16A,19A '4.0.0':30B,66C '4.14.9':32B,68C 'affect':116C 'agent':12A,47B,52B,59B,87C,91C,105C 'authent':44B,84C 'blind':111C 'boolean':112C 'contain':69C 'contamin':83C 'cross':82C 'cross-contamin':81C 'cve':15A,18A 'due':76C 'everi':11A,58B,104C 'extract':57B,103C 'flaw':37B 'handl':42B 'host':24B 'infrastructur':21B 'inject':3A,36B,72C,93C 'intern':61B,107C 'item':117C 'key':14A,62B,108C 'let':4A 'low':7A 'low-privileg':6A 'one':90C 'oracl':113C 'paramet':41B,101C 'placehold':80C 'privileg':8A 'q':98C 'read':10A,48B,88C 'regex':79C 'search':100C 'select':95C 'self':23B 'self-host':22B 'sequenti':78C 'siem':25B 'singl':51B 'sql':2A,35B,71C 'total':115C 'union':94C 'use':54B 'user':9A,45B,85C 'version':28B,64C 'via':96C 'vulner':73C 'wazuh':1A,26B,27B,63C 'wazuhdbbackend':40B 'wazuhdbbackend._substitute_params':75C","nicknames":[],"mitigations":[],"who_affected":"Teams running a Wazuh manager between 4.0.0 and 4.14.9 where some users hold the agent:read permission through the API. The attacker needs valid credentials, so exposure is limited to authenticated API users, but any such user can read every agent's internal key. Installations on 4.14.9 or later, or with no authenticated users beyond administrators, are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","selfhosted","siem","wazuh"],"campaign_type":null,"search_a":"'-112341':17A,20A '-2026':16A,19A 'agent':12A 'cve':15A,18A 'everi':11A 'inject':3A 'key':14A 'let':4A 'low':7A 'low-privileg':6A 'privileg':8A 'read':10A 'sql':2A 'user':9A 'wazuh':1A","search_b":"'4.0.0':30B '4.14.9':32B 'agent':47B,52B,59B 'authent':44B 'everi':58B 'extract':57B 'flaw':37B 'handl':42B 'host':24B 'infrastructur':21B 'inject':36B 'intern':61B 'key':62B 'paramet':41B 'read':48B 'self':23B 'self-host':22B 'siem':25B 'singl':51B 'sql':35B 'use':54B 'user':45B 'version':28B 'wazuh':26B,27B 'wazuhdbbackend':40B","search_c":"'4.0.0':66C '4.14.9':68C 'affect':116C 'agent':87C,91C,105C 'authent':84C 'blind':111C 'boolean':112C 'contain':69C 'contamin':83C 'cross':82C 'cross-contamin':81C 'due':76C 'everi':104C 'extract':103C 'inject':72C,93C 'intern':107C 'item':117C 'key':108C 'one':90C 'oracl':113C 'paramet':101C 'placehold':80C 'q':98C 'read':88C 'regex':79C 'search':100C 'select':95C 'sequenti':78C 'sql':71C 'total':115C 'union':94C 'user':85C 'version':64C 'via':96C 'vulner':73C 'wazuh':63C 'wazuhdbbackend._substitute_params':75C","first_public_at":"2026-11-06T10:29:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112341","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112341","severity":null,"published_at":"2026-11-06T15:17:08+00:00","modified_at":"2026-11-06T15:17:08+00:00","first_seen_at":"2026-11-06T15:42:43+00:00","fetched_at":"2026-11-06T15:42:43+00:00","note":null}],"documents":[{"id":87519,"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.9","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":87543,"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-qj88-7rr2-4chx","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-06T10:29:27+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":87544,"url":"https://www.vulncheck.com/advisories/wazuh-before-4.14.9-sql-injection-via-wazuhdbbackend-substitute-params","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}