Roshan Guragain

**Name of the Vulnerable Software and Affected Versions** Wazuh versions 3.6.1 through 3.13.5 Wazuh versions 4.0.0 through 4.2.7 Wazuh versions 4.3.0 through 4.3.7 **Description** The issue is an authenticated remote code execution (RCE) vulnerability. It can be exploited via the Active Response endpoint. **Recommendations** For versions 3.6.1 through 3.13.5, consider disabling access to the Active Response endpoint until a patch is available. For versions 4.0.0 through 4.2.7, restrict access to the Active Response endpoint to minimize the risk of exploitation. For versions 4.3.0 through 4.3.7, avoid using the Active Response endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.