Wazuh Manager authd service accepts client‑initiated TLS/SSL renegotiation requests without enforcing limits. An attacker can repeatedly trigger renegotiation, causing the service to consume excessive CPU and become unavailable, effectively denying service to legitimate users.

This vulnerability affects the Wazuh Manager product from the Wazuh vendor, specifically all installations running version 4.7.3 or earlier.

The CVSS score of 6.9 indicates moderate to high severity, and the EPSS score of less than 1% suggests a low likelihood of widespread exploitation, though the vulnerability is not listed in CISA’s KEV catalog. Attackers likely need remote network access to the authd service to send repeated renegotiation requests; no local privilege escalation or sensitive data exposure is reported.