CVE lookup

CVE-2026-44901

Pruva has a verified reproduction for CVE-2026-44901: Wazuh cluster DAPI deserialization of untrusted data — RCE via sort_casting builtin resolution (getattr(builtins, 'exec')) in result merging. The canonical evidence record is REPRO-2026-00325.

REPRO

REPRO-2026-00325

Package

wazuh/wazuh · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source