Vulnerability Description
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted process on the manager, immediately disconnecting all agents from the manager. A second code path reached by the same underflow may allow heap memory corruption. This issue has been fixed in version 4.14.5.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wazuh | Wazuh | >= 3.0.0, < 4.14.5 |
Related Weaknesses (CWE)
References
- https://github.com/wazuh/wazuh/security/advisories/GHSA-jv5r-5p7c-g9fqExploitVendor Advisory
- https://github.com/wazuh/wazuh/security/advisories/GHSA-jv5r-5p7c-g9fqExploitVendor Advisory
FAQ
What is CVE-2026-44251?
CVE-2026-44251 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 al...
How severe is CVE-2026-44251?
CVE-2026-44251 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-44251?
Check the references section above for vendor advisories and patch information. Affected products include: Wazuh Wazuh.