Memory Leak Vulnerability in Wazuh Manager Affects Remote Security Management

CVE-2026-112336

What is CVE-2026-112336?

Wazuh Manager versions prior to 4.14.9 are susceptible to a memory leak that arises from the JSON decoder. This vulnerability enables remote attackers to exploit the system by enrolling agents through passwordless methods, allowing them to send events with duplicate fields. Such attacks can exhaust the memory of the wazuh-analysisd process, potentially leading to an Out Of Memory (OOM) condition that effectively disrupts alerting capabilities.

References