CVE-2026-44251

Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message

State: Published
Severity: 6.5 Medium
Published: Jul 17, 2026
Updated: Jul 17, 2026
Reserved: May 5, 2026

Read the record on cve.org

Description

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted process on the manager, immediately disconnecting all agents from the manager. A second code path reached by the same underflow may allow heap memory corruption. This issue has been fixed in version 4.14.5.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	GitHub_M

Weaknesses

CWE-122 Heap-based Buffer Overflow
CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
wazuhwazuh	>= 3.0.0, < 4.14.5Affected

References

https://github.com/wazuh/wazuh/security/advisories/GHSA-jv5r-5p7c-g9fq

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.