CVE-2025-15617: Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUBTOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits or altering release tags.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15617?
CVE-2025-15617 is classified as a high severity vulnerability due to the exposure of sensitive tokens.
How do I fix CVE-2025-15617?
To fix CVE-2025-15617, update Wazuh to version 4.12.1 or later where the vulnerability is addressed.
What is affected by CVE-2025-15617?
CVE-2025-15617 affects Wazuh version 4.12.0 specifically.
What does CVE-2025-15617 exploit?
CVE-2025-15617 exploits the exposure of the GITHUB_TOKEN in GitHub Actions workflow artifacts.
What are the consequences of CVE-2025-15617?
The consequences of CVE-2025-15617 include unauthorized access to resources using the exposed GITHUB_TOKEN.