Python
CVE-2025-24016
CRITICAL
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2021 - Software and Data Integrity Failures
ASVS 5.0
V10 - Malicious Code Integrity verification, supply chain security
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | Critical risk (CVSS 9.9, EPSS 93.9%). Wazuh is a widely-used open source SIEM/XDR platform. Compromising the SIEM server gives attackers access to security monitoring data, the ability to suppress alerts, and a central pivot point to all monitored endpoints. |
| Exploit ScenarioDerived | An attacker with access to the Wazuh API sends crafted JSON parameters containing serialized Python objects. The as_wazuh_object deserializer processes the payload, executing arbitrary code on the Wazuh manager. The attacker then disables alerting and uses the SIEM's agent connections to pivot to monitored systems. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 27, 2026
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI that allows remote code execution on Wazuh management servers.
Earlier versions of this analysis (1)
A deserialization vulnerability in Wazuh's DistributedAPI allows authenticated attackers to execute arbitrary code on Wazuh servers by sending crafted serialized objects through API parameters.
RemediationAI
Update to Wazuh 4.9.1+. Restrict API access to authorized management clients. Monitor for unusual API calls and process execution on Wazuh servers.
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in go
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CWE-502 deserialization flaw in the as_wazuh_object function processes serialized JSON parameters without proper validation. An attacker who can reach the DistributedAPI can craft payloads that deserialize into objects enabling code execution.
Know when Python gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are serialized as JSON and deserialized using as_wazuh_object. If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access or even by a compromised agent. Version 4.9.1 contains a fix.
Executive ViewAI
Wazuh server versions 4.4.0 through 4.9.0 are vulnerable to critical remote code execution attacks that are confirmed actively exploited in the wild (CISA KEV). Authenticated attackers or compromised security agents can execute arbitrary code on Wazuh infrastructure, potentially compromising your entire security monitoring and response capability. Organizations running affected versions face immediate risk of security infrastructure takeover with no vendor patch currently available.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict Wazuh API network access to authorized internal subnets only via firewall rules; (2) Implement strict agent enrollment controls and disable untrusted agents immediately; (3) Enable comprehensive logging and monitoring of DistributedAPI calls and Python execution on Wazuh servers; (4) Deploy network-based intrusion detection signatures targeting exploitation attempts; (5) Consider temporary failover to air-gapped backup security monitoring until patch is available. Monitor Wazuh security advisories and CISA alerts daily for patch release notification.
Threat Intelligence Overview
NVD
CVE.org
CISA KEV
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Insecure deserialization occurs when an application converts serialized data (a stream of bytes representing an object's state) back into a living object without proper validation.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same weakness CWE-502 – Deserialization of Untrusted Data
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest | Affected |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Linux Enterprise Server 16.1 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Fixed |
GitHub PoC
Exploit-DB