4.14.4 Release notes - 17 March 2026

This section lists the changes in version 4.14.4. Every update of the Wazuh solution is cumulative and includes all enhancements and fixes from previous releases.

What's new

This release includes new features or enhancements as the following:

Wazuh agent

  • #34541 Changed the msi_output extension from .txt to .log.

  • #34602 Changed the data type to unsigned char in print_hex_string.

  • #34552 Changed sync primitive disposal to stop and soften teardown failures.

Other

  • #34154 Updated the azure-core dependency to 1.38.0 and the Werkzeug dependency to 3.1.5.

  • #34403 Updated the protobuf dependency to 5.29.6 and the python-multipart dependency to 0.0.22.

Resolved issues

This release resolves known issues as the following:

Wazuh manager

  • #34658 Fixed heap-based null write buffer underflows.

Wazuh agent

  • #34240 Fixed MS Graph default rules not triggering properly.

  • #34473 Unified date formats in Active Response logs to ensure consistent timestamp formatting.

  • #34376 Updated Docker integration rules to improve detection coverage and compatibility.

  • #34501 Fixed a heap-based null write buffer underflow in GetAlertData.

  • #34517 Retained MSI installer logs after Windows agent upgrades to improve troubleshooting visibility.

  • #34530 Fixed incorrect Windows 11 edition detection after upgrading the agent to version 4.14.3.

  • #34274 Fixed a macOS agent crash during Syscollector reload caused by invalid pthread_cond_destroy() usage.

  • #34900 Fixed pthread_mutex_destroy invalid argument error on AIX in Syscollector.

  • #34540 Fixed Windows OS edition detection.

RESTful API

  • #34176 Fixed timestamps in the /agents/upgrade_result endpoint to return accurate UTC time.

  • #34464 Improved cluster file synchronization path handling by adding safe path joins.

  • #34459 Fixed an API login race condition.

Wazuh dashboard

  • #8047 Fixed indexDate function to correctly handle ISO week-year calculation for weekly indices.

  • #8052 Fixed the status code and body displayed in failed requests in Server management > Dev tools.

  • #8087 Fixed saving of valid Windows EventChannel QueryList queries in the agent.conf editor.

Changelogs

The repository changelogs provide more details about the changes.

Product repositories

Auxiliary repositories