Memory Exhaustion Vulnerability in Wazuh Platform by Wazuh
CVE-2026-44253
4.9MEDIUM
What is CVE-2026-44253?
The Wazuh platform is affected by a memory exhaustion vulnerability that originates from its cluster protocol. Specifically, the receive_str() method permits an authenticated cluster node to send an uncontrolled amount of data, possibly leading to severe memory depletion on the master node. This exploitation enables an attacker to issue commands that create large multi-gigabyte bytearrays, resulting in an accumulation of requests that can severely disrupt agent connectivity and alert processing within the monitored environment. Proper fixes have been implemented in Wazuh versions 4.14.5 and 5.0.0-beta2 to mitigate this issue.
Affected Version(s)
wazuh >= 3.9.0, < 4.14.5 < 3.9.0, 4.14.5
wazuh >= 5.0.0-beta1, < 5.0.0-beta2 < 5.0.0-beta1, 5.0.0-beta2