What’s Vulnerable › Vulnerabilities

CVE-2023-42455: Wazuh vulnerable to user privilege escalation

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-09 · updated 2026-06-17
• Weakness: CWE-639

Description

Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API administrator key used by the Dashboard using the browser development tools. This allows a logged user to the dashboard to become administrator of the API, even if their dashboard role is not. Version 4.4.2 contains a fix. There are no known workarounds.

Affected products

• Wazuh-Dashboard: from 4.4.0 before 4.4.2 — fixed in 4.4.2
• wazuh-kibana-app: from 4.4.0 before 4.4.2 — fixed in 4.4.2

How to fix

Upgrade to a fixed version: Wazuh-Dashboard 4.4.2; wazuh-kibana-app 4.4.2. Check the vendor advisory for mitigations.

References

• https://github.com/wazuh/wazuh-dashboard-plugins/issues/5427
• https://github.com/wazuh/wazuh-kibana-app/pull/5428
• https://github.com/wazuh/wazuh-kibana-app/security/advisories/GHSA-8w7x-52r7-qvjf
• https://github.com/wazuh/wazuh-dashboard-plugins/issues/5427
• https://github.com/wazuh/wazuh-kibana-app/pull/5428
• https://github.com/wazuh/wazuh-kibana-app/security/advisories/GHSA-8w7x-52r7-qvjf

Get alerted when CVE-2023-42455 or the next vulnerability affects your stack