CVE-2025-24016
unknown
KEV
CVSS v3
—
CVSS v2
—
VIR risk
1.5
Description
Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.
CISA KEV
- Vendor
- Wazuh
- Product
- Wazuh Server
- Due date
- 2025-07-01
Predictions
Exploit likelihood
99%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cisa-kev — https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/ ; https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh ; https://nvd.nist.gov/vuln/detail/CVE-2025-24016
Exploits
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Go | github.com/wazuh/wazuh | >=4.4.0,<4.9.1 | 4.9.1 |
| Go | github.com/wazuh/wazuh | >=4.4.0+incompatible,<4.9.1+incompatible | 4.9.1+incompatible |
References
- https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh
- https://nvd.nist.gov/vuln/detail/CVE-2025-24016
- https://github.com/wazuh/wazuh
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016
- https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/ ; https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh ; https://nvd.nist.gov/vuln/detail/CVE-2025-24016
Verify integrity in audit chain (admin only). AS-IS.