Remote Code Execution Vulnerability in Wazuh by Wazuh
CVE-2021-44079

9.8CRITICAL

Key Information:

Vendor: Wazuh
Status: Wazuh
Vendor: CVE Published:; 22 November 2021

What is CVE-2021-44079?

In Wazuh versions 4.2.0 to 4.2.4, the wazuh-slack active response script does not adequately validate user agent inputs. This enables attackers to execute arbitrary commands on the server by injecting malicious user agent strings into the curl command line. As a result, this flaw poses a significant security risk, allowing for unauthorized remote command execution via manipulated HTTP requests.