Wazuh API Vulnerability in Agent Configuration Affects Security Detection Software

CVE-2025-64483

What is CVE-2025-64483?

The Wazuh API has a vulnerability in its Agent Configuration functionality, affecting versions 4.9.0 through before 4.13.0. In specific configurations, this flaw allows authenticated users with read-only API roles to access sensitive agent enrollment credentials via the /utils/configuration endpoint. These retrieved credentials can be exploited to register new agents within the same Wazuh tenant without the need for elevated permissions through the UI, posing a significant risk to system integrity and security. This vulnerability has been addressed in version 4.13.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References