Security vulnerabilities I have responsibly disclosed. All findings were reported to the affected vendors and patched before public disclosure.
missing authorization lets unauthenticated attackers use status, private, and private_only parameters to view draft, pending, trashed, or private event and location details
pre-authentication cluster header parsing lets one source IP allocate 256 MiB of manager memory per TCP connection
zlib decompression bomb in cluster archive processing lets an authenticated peer exhaust wazuh-clusterd memory
peer-controlled cluster hello node name lets an authenticated peer delete the contents of arbitrary manager directories on disconnect
merged-file header path traversal in cluster sync allows a cluster peer to write arbitrary files under WAZUH_PATH and reach root code execution
DAPI tmp_file path injection lets a cluster peer read arbitrary master files and forge REST API administrator tokens
peer-controlled metadata key in cluster sync allows arbitrary file writes under WAZUH_PATH and root code execution on the manager
insufficient role enforcement allows non-admin internal users on the root or management tenant to read and modify network configuration
incomplete tenant scoping lets a non-root tenant admin clear secondary escrow backup keys across all tenants
Authentication bypass via i18n locale prefix; middleware matcher evaluates unsanitized pathname
Middleware header sanitization bypass; missing x-middleware-override-headers allows header spoofing
Reflected XSS via unescaped attribute names in next/head SSR serializer
race condition in appointment creation allows concurrent requests to create overlapping appointments for one agent
unauthenticated ML-KEM key injection adds an attacker-controlled recipient to a tenant’s staff-crypto directory
one tenant’s throttle row disables the PIN brute-force throttle for the same identifier in other tenants
invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie
SSRF via HTTP redirect in repository migration allows authenticated users to bypass internal address restrictions and reach localhost or private-network services
heap over-read in UPnP event callback URL host parsing (upnpevents.c)
PGP email verification handler discards GPG return values, falsely marking all inbound signed emails as valid signatures
unauthenticated request to OTRS import controller endpoint blocks request workers for ~115 seconds, enabling denial of service
knowledge base permission checks allow users with limited read permissions to access items outside their assigned scope
unauthenticated staff crypto poisoning breaks E2E recipient directory
WebAuthn passkey injection allows account takeover
unauthenticated GLOBAL_ADMIN account creation post-bootstrap
unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits
bootstrap challenge proof-of-work difficulty hardcoded to 16 bits enables abuse rate amplification
stored click-triggered XSS via javascript: tenant links rendered into patient-facing footer
tenant detail endpoint discloses live PostgreSQL connection string, superuser-scoped in the tested official deployment
logout page clears local access_token before server-side revocation, leaving duplicated tokens valid until expiry
schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers
GET appointment by ID returns full appointment record without authorization
bootstrap booking flow allows unauthenticated booking on isPublic=false channels
unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections
staff deletion removes pending invites cross-tenant by email match
client PIN challenge throttle is keyed by emailHash only, allowing cross-tenant lockout
insecure direct object reference leading to authenticated arbitrary post deletion via course GET parameter
IDOR in FieldDefinition lets authenticated users alter or destroy other users’ submission fields and stored disclosure content
in-app password change does not rotate User.session_id, contradicting the documented threat model
missing authorization in AI assistance controller for text tools
missing authorization in AI assistance controller for context data used in text tools
vulnerability in Microsoft Online Services
bypass of UNC path mitigation in Windows OSQuery via \\?\UNC\
Ranked among the top contributors of the program.