An unsafe deserialization vulnerability allows for remote code execution on Wazuh servers.
The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. More https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh
