VYPR
← All advisories
High severity7.7NVD Advisory· Published Nov 21, 2025· Updated Jun 17, 2026

CVE-2025-30201

CVE-2025-30201

Description

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers to force NTLM authentication through malicious UNC paths in various agent configuration settings, potentially leading NTLM relay attacks that would result privilege escalation and remote code execution. This issue has been patched in version 4.13.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Wazuh/Wazuh3 versions
    cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*range: <4.13.0
    • (no CPE)range: <4.13.0
    • (no CPE)range: < 4.13.0
  • Wazuh/Wazuh Agentllm-create
    Range: <4.13.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.