Time-of-Check/Time-of-Use Race Condition in Wazuh File Integrity Monitoring
CVE-2025-34294

7.1HIGH

Key Information:

Vendor: Wazuh, Inc.
Status: Wazuh
Vendor: CVE Published:; 28 October 2025

🔔 Create Wazuh, Inc. Vulnerability Alert

What is CVE-2025-34294?

A race condition in Wazuh's File Integrity Monitoring feature when configured with automatic threat removal allows local attackers to exploit insufficient synchronization. The issue arises when the agent records an active-response action but fails to validate the deletion target properly, leading to the risk of SYSTEM-level arbitrary file deletion. This vulnerability can enable attackers to manipulate the deletion process, resulting in unauthorized access and potential privilege escalation. An incomplete fix was attempted in pull request 8697 on July 10, 2025.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch