CVE-2026-44251

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.0.0 through 4.14.4

Description A size t integer underflow occurs in the os crypto/shared/msgs.c:389 file. This flaw allows an enrolled agent to crash the wazuh-remoted process on the manager, which results in the immediate disconnection of all agents. Additionally, a separate code path triggered by the same underflow may lead to heap memory corruption, a condition where the program writes data outside the boundaries of a memory block allocated on the heap.

Recommendations Update to version 4.14.5.