CVE-2026-112336 | BDVDB-2026-401093 Detail
wazuhwazuh
Description#
Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields such as id, triggering an OOM kill that disables alerting.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-401 Missing Release of Memory after Effective Lifetime
References#
- https://github.com/wazuh/wazuh/security/advisories/GHSA-6w6h-fwqm-6hjj
- https://github.com/wazuh/wazuh/commit/7fdd928228fa0478814277ab3e49bda9809cd50a
- https://github.com/wazuh/wazuh/commit/c7df52ee8158577e7bd830e2b84d024612561f8b
- https://github.com/wazuh/wazuh/releases/tag/v4.14.9
- https://www.vulncheck.com/advisories/wazuh-manager-3.0.0-before-4.14.9-memory-leak-dos-via-json-decoder
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.