A vulnerability has been found in Wazuh 4.12.0 and classified as problematic. Impacted is an unknown function of the component GitHub Action Handler. This manipulation of the argument GITHUB_TOKEN causes insufficiently protected credentials. This vulnerability is tracked as CVE-2025-15617. The attack is possible to be carried out remotely.
| Vendor | Product | Versions |
|---|---|---|
| wazuh | wazuh (github actions) | 4.12.0 |
Updated description with more technical detail and corrected exploit availability to false.
Updated severity to HIGH and corrected exploit availability to false.
Initial creation
