CVE-2026-45798

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.5.0 through 4.14.5 Wazuh versions 5.0.0-beta1 and earlier

Description A flaw exists in the compare wazuh versions() function within src/shared/version op.c where the enrollment V: field is copied into a 10-byte stack buffer using strncpy() without explicit termination. This function is accessible before authentication via wazuh-authd on TCP port 1515 when anonymous TLS enrollment is enabled. A version string containing at least nine non-null bytes can cause strchr() and strtok() to read beyond the buffer and allow strtok() to write a null byte into adjacent stack memory, resulting in a remote denial of service.

Recommendations Update to version 4.14.6. Update to version 5.0.0-beta2.