Which versions of Wazuh Manager are affected by CVE-2026-56699?

Wazuh Manager versions prior to 5.0.0-beta3 contain a critical vulnerability enabling any enrolled agent to delete audit logs, falsify alerts, and manipulate forensic evidence by accessing the…. A patch is available.

How to fix or mitigate CVE-2026-56699?

Within 24 hours, inventory all Wazuh Manager deployments and document installed versions; implement strict controls on agent enrollment and credential distribution; enable verbose logging for all OpenSearch database operations. Within 7 days, deploy real-time monitoring and alerting for OpenSearch bulk operations, implement network segmentation to restrict agent communication to OpenSearch infrastructure, and contact Wazuh support for interim mitigation guidance. Within 30 days, monitor official Wazuh advisories and security announcements for patched versions, develop a comprehensive upgrade and testing plan, and execute staged deployment beginning with non-production environments.

Wazuh Manager CVE-2026-56699

Q: What is the CVSS score of CVE-2026-56699?

CVE-2026-56699 has a CVSS 4.0 base score of 10.0 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-44630 CRITICAL

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-07-15 VulnCheck

GHSA-r2pm-mgrm-39hq

Code Injection Wazuh

10.0

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

10.0 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Requires a valid enrolled agent so PR:L not PR:N; injection into the shared OpenSearch backend under admin credentials changes scope (S:C) with full C/I/A loss.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 15, 2026 - 13:03 EUVD

Analysis Generated

Jul 15, 2026 - 12:28 vuln.today

CVE Published

Jul 15, 2026 - 11:25 cve.org

CRITICAL 10.0

DescriptionCVE.org

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin credentials, enabling document deletion, alert tampering, and cross-agent SIEM state manipulation.

AnalysisAI

NDJSON injection in Wazuh Manager before 5.0.0-beta3 lets any enrolled agent smuggle arbitrary OpenSearch bulk operations because the DataValue.index field is not escaped when the manager builds inventory-sync bulk requests. Because those requests execute under the manager's OpenSearch admin credentials, a single low-trust agent can delete documents, tamper with alerts, and manipulate SIEM state across all other agents. Rated CVSS 10.0 by the reporter (VulnCheck); no public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

Wazuh is an open-source SIEM/XDR platform whose manager forwards agent-collected inventory and alert data into an OpenSearch (Elasticsearch-compatible) backend using the _bulk API. The _bulk API consumes NDJSON (newline-delimited JSON), where each request is a sequence of action/metadata lines followed by document lines, and the index name is an attacker-influencing token on the action line. This is a classic CWE-74 injection (improper neutralization of special elements): the manager interpolates the agent-controlled DataValue.index value into the NDJSON stream without escaping newlines or JSON structure, so an agent can inject its own action lines (delete, index, update) that OpenSearch then executes. The flaw sits specifically in the inventory-sync code path per the VulnCheck advisory and vendor advisory GHSA-ff9g-85jq-r3g3. Affected CPE is cpe:2.3:a:wazuh:wazuh:*.

RemediationAI

Vendor-released patch: 5.0.0-beta3 - upgrade the Wazuh Manager to 5.0.0-beta3 or later per advisory GHSA-ff9g-85jq-r3g3 (https://github.com/wazuh/wazuh/security/advisories/GHSA-ff9g-85jq-r3g3). Note this is a beta release, so production operators should validate stability before rolling out; if adopting a beta is not acceptable, apply compensating controls until a stable fixed build is available. As interim mitigations, treat agent enrollment as a trust boundary: tightly control agent registration keys and revoke keys for any agent on an untrusted or internet-exposed host, since only enrolled agents can reach the vulnerable code path (trade-off: shrinks the attacker population but does not fix the injection). Additionally, isolate the OpenSearch backend on a management network and scope the manager's OpenSearch credentials to the minimum indices required rather than full admin, limiting the blast radius of injected operations (trade-off: may break cross-index features and requires careful index-permission tuning). Monitor OpenSearch for unexpected delete/update bulk operations as a detective control.