CVE-2025-15617
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Mar 27, 2026
Vendor
unknown
Description
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits or altering release tags.