CVE-2026-25771
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Published Mar 17, 2026 · updated Jun 17, 2026 · wazuh wazuh
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulnerability exists in the Wazuh API authentication middleware ( ). The application uses an asynchronous event loop (Starlette/Asyncio) to call a synchronous function ( ) that performs blocking disk I/O on every request containing a Bearer token. An unauthenticated remote attacker can exploit this by flooding the API with requests containing invalid Bearer tokens. This forces the single-threaded event loop to pause for file read operations repeatedly, starving the application of CPU resources and potentially preventing it from accepting or processing legitimate connections. Version 4.14.3 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 17, 2026 · NIST NVD
Detected
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulnerability exists in the Wazuh API authentication middleware ( ). The application uses an asynchronous event loop (Starlette/Asyncio) to call a synchronous function ( ) that performs blocking disk I/O on every request cont
Jun 17, 2026 · NIST NVD
Updated
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulnerability exists in the Wazuh API authentication middleware ( ). The application uses an asynchronous event loop (Starlette/Asyncio) to call a synchronous function ( ) that performs blocking disk I/O on every request cont
Affected
- cpe wazuh/wazuhversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-25771
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-25771
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulnerability exists in the Wazuh API authentication middleware ( ). The application uses
nvd.nist.gov