Miguevrgo

**Name of the Vulnerable Software and Affected Versions** Wazuh workflows versions prior to 44bf114 **Description** A shell injection issue exists in GitHub Actions where attackers can execute arbitrary commands by submitting pull requests containing crafted `VERSION.json` files. This occurs because shell metacharacters injected into environment variables are directly interpolated into run steps. This flaw allows for command execution and the exfiltration of sensitive secrets, such as `GITHUB TOKEN` and AWS credentials, specifically on self-hosted runners. **Recommendations** Update Wazuh workflows to version 44bf114 or later.