CVE-2025-30201

Katalog CVE

CVSS 9.1 · Critical EPSS 0,77%

Kerentanan External Control of File Name or Path pada wazuh. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers to force NTLM authentication through malicious UNC paths in various agent configuration settings, potentially leading NTLM relay attacks that would result privilege escalation and remote code execution. This issue has been patched in version 4.13.0.

Rincian

Terbit di NVD

21 November 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-73: External Control of File Name or Path
CWE-294: Authentication Bypass by Capture-replay

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wazuh/wazuh/security/advisories/GHSA-x697-jf34-gp5x exploit · advisory vendor
• https://github.com/wazuh/wazuh/commit/688972da589e5d40d2a81bcd738240303a3dc45a patch
• https://github.com/wazuh/wazuh/pull/30060 issue tracking