Update: proof of concept on GitHub published. Wazuh servers are affected by an unsafe deserialization flaw that lets an attacker run arbitrary Python code on the server, for example to shut down the master server. It can be reached remotely over the network with only low-level API access (such as through a compromised dashboard, another server in the cluster, or, in certain configurations, a compromised agent), and it is listed as exploite...