The vulnerability of the “as_wazuh_object” function in the Wazuh intrusion detection and prevention system allows a perpetrator to execute arbitrary code.

The vulnerability of the “aswazuhobject” function in the Wazuh intrusion detection and prevention system is related to deficiencies in the deserialization mechanism of parameters from DistributedAPI. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...