4 matches found
CVE-Wazuh
Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...
CVE-2026-56699
The Wazuh Manager is vulnerable to NDJSON Injection in the inventory_sync() function within the cluster synchronization component. This occurs because the software fails to escape the DataValue.index field when constructing OpenSearch bulk requests. An attacker operating remotely can leverage thi...
WS-2026-0009
Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index NDJSON injection in inventorysync in Wazuh Manager. Affects 5.0.0-beta1 and 5.0.0-beta2. Fix merged to main in commit 9939780588029e9a20db6c8f83bb19b8885d9114 'Detect unsafe payload and discard events'; announced...