CVE-2025-15616

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15616

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15616.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15616

Aliases

GHSA-522v-p59v-58gm

Published

2026-03-27T16:38:20.559Z

Modified

2026-07-16T03:31:12.931463606Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Wazuh Agent and Manager OS Command Injection and Untrusted Search Path

Details

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15616.json",
    "cwe_ids": [
        "CWE-94"
    ],
    "cna_assigner": "VulnCheck"
}

References

Affected packages

Git / github.com/wazuh/wazuh

Affected ranges

Type

GIT

Repo

https://github.com/wazuh/wazuh

Events

Introduced

517de413cefb03dc72405e874f9dde798f67dbb0

Fixed

038fe11d988fa54cca8a6c3101fc7906fad5da3b

Database specific

{
    "cpe": "cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "4.8.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15616.json"