CVE-2025-15616CWE-94code-injection

CVE-2025-15616

Medium · published March 27, 2026

CVSS v3.1
6.7
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01625 · 76.0th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-03-27T21:16Z
Affected products (1)
ProductVersionsFixed in
wazuh/wazuh≥ 2.1.0, < 4.8.04.8.0
References (2)
https://github.com/wazuh/wazuh/security/advisories/GHSA-522v-p59v-58gm · [email protected]https://www.vulncheck.com/advisories/multiple-vulnerabilities-related-to-shell-injection-and-path-traversal-flaws · [email protected]
EPSS history
Timeline
  • 27 MAR 16:38Z
    Wazuh Agent and Manager OS Command Injection and Untrusted Search Path
    cvelistv5