CVE-2025-64483 - CVE House

Back to Database

Status published Medium CVE-2025-64483

Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint

5.3 CVSS

Vulnerability Description

Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the /utils/configuration endpoint. These credentials can be used to register new agents within the same Wazuh tenant without requiring elevated permissions through the UI. This issue has been patched in version 4.13.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-64483

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from wazuh

View All →

Wazuh NULL pointer dereference in fim_alert line 666

Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

Wazuh vulnerable to NULL pointer dereference in DecodeCiscat

Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state

Wazuh vulnerable to NULL pointer dereference in fim_alert line 712

Affected Vendor

wazuh

View all reports →

Affected Software

wazuh-dashboard-plugins

Vulnerable Versions:

>= 4.9.0, < 4.13.0

Timeline

Official Publish: November 21st, 2025

Last Modified: February 6th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation