Security Research

QUIC stack enforces the stream-level but not the connection-level flow control limit, letting a remote peer make one connection allocate about 100 MB of heap instead of the 768 KiB window

missing authorization lets unauthenticated attackers use status, private, and private_only parameters to view draft, pending, trashed, or private event and location details

pre-authentication cluster header parsing lets one source IP allocate 256 MiB of manager memory per TCP connection

zlib decompression bomb in cluster archive processing lets an authenticated peer exhaust wazuh-clusterd memory

peer-controlled cluster hello node name lets an authenticated peer delete the contents of arbitrary manager directories on disconnect

merged-file header path traversal in cluster sync allows a cluster peer to write arbitrary files under WAZUH_PATH and reach root code execution

DAPI tmp_file path injection lets a cluster peer read arbitrary master files and forge REST API administrator tokens

peer-controlled metadata key in cluster sync allows arbitrary file writes under WAZUH_PATH and root code execution on the manager

insufficient role enforcement allows non-admin internal users on the root or management tenant to read and modify network configuration

incomplete tenant scoping lets a non-root tenant admin clear secondary escrow backup keys across all tenants

Authentication bypass via i18n locale prefix; middleware matcher evaluates unsanitized pathname

Middleware header sanitization bypass; missing x-middleware-override-headers allows header spoofing

Reflected XSS via unescaped attribute names in next/head SSR serializer

race condition in appointment creation allows concurrent requests to create overlapping appointments for one agent

unauthenticated ML-KEM key injection adds an attacker-controlled recipient to a tenant’s staff-crypto directory

one tenant’s throttle row disables the PIN brute-force throttle for the same identifier in other tenants

invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie

SSRF via HTTP redirect in repository migration allows authenticated users to bypass internal address restrictions and reach localhost or private-network services

heap over-read in UPnP event callback URL host parsing (upnpevents.c)

PGP email verification handler discards GPG return values, falsely marking all inbound signed emails as valid signatures

unauthenticated request to OTRS import controller endpoint blocks request workers for ~115 seconds, enabling denial of service

knowledge base permission checks allow users with limited read permissions to access items outside their assigned scope

unauthenticated staff crypto poisoning breaks E2E recipient directory

WebAuthn passkey injection allows account takeover

tenant admin self-promotes to GLOBAL_ADMIN

unauthenticated GLOBAL_ADMIN account creation post-bootstrap

passphrase login attempts are not rate-limited

unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits

bootstrap challenge proof-of-work difficulty hardcoded to 16 bits enables abuse rate amplification

stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer

tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment

logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry

schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers

GET appointment by ID returns full appointment record without authorization

bootstrap booking flow allows unauthenticated booking on isPublic=false channels

unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections

staff deletion removes pending invites cross-tenant by email match

client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockout

insecure direct object reference leading to authenticated arbitrary post deletion via course GET parameter

IDOR in FieldDefinition lets authenticated users alter or destroy other users’ submission fields and stored disclosure content

in-app password change does not rotate User.session_id, contradicting the documented threat model

missing authorization in AI assistance controller for text tools

missing authorization in AI assistance controller for context data used in text tools

cross-site request forgery (CSRF) in OAuth callback endpoints

vulnerability in Microsoft Online Services

bypass of UNC path mitigation in Windows OSQuery via \\?\UNC\