PT-2025-47791 · Wazuh · Wazuh

Published 2025-11-05 · Updated 2026-02-06 · CVE-2025-64483

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.9.0 through 4.12.9

Description Wazuh, a security detection, visibility, and compliance open source project, has an issue where the API – Agent Configuration, in specific setups, permits authenticated users with read-only API roles to obtain agent enrollment credentials via the /utils/configuration endpoint. These credentials can be leveraged to register new agents within the same Wazuh tenant without the necessary elevated permissions through the user interface.

Recommendations Update to version 4.13.0 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-14828

CVE-2025-64483

GHSA-GWF3-8GM3-QRMJ

Affected Products

Wazuh

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64483.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-64483 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64483 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14828 · Security Note
• https://github.com/wazuh/wazuh-dashboard-plugins/commit/eac859f1ad0bf5eb8b0dbc7ea7eeef4bd22c3722 · Note
• https://github.com/wazuh/wazuh-dashboard-plugins/security/advisories/GHSA-gwf3-8gm3-qrmj · Note
• https://t.me/CVEtracker/37962 · Telegram Post
• https://t.me/cveNotify/151197 · Telegram Post
• https://vuldb.com/?id.333265 · Note