CVE-2025-15617: Wazuh

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits or altering release tags.

Affected products

• Wazuh Wazuh: version 4.12.0 only

Published 2026-03-27. Last modified 2026-10-07.