THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-67307 (MEDIUM 6.3) — Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to

[NVD] CVE-2026-67307 (MEDIUM 6.3) — Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to

mednvdPublished 2026-08-01

CVE-2026-67307 CVSS: 6.3 MEDIUM Published: 2026-08-01T13:17:00.403

Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to spoof cluster attribution in indexed inventory and v

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67307