CVE Intelligence

Wazuh Wazuh (GitHub Actions) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wazuh Wazuh (GitHub Actions): 1 record(s), with affected versions and fixes.

CVE-2025-15617 High · 8.1 CWE-522 Mar 27, 2026
Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits or altering release tags.