Logic Error in Wazuh Affects Rate Limiting Mechanism

CVE-2026-33434

What is CVE-2026-33434?

Wazuh, a widely-used open-source platform for threat prevention, detection, and response, has a logic error within the CheckRateLimitsMiddleware.dispatch() function. In versions from 4.6.0 to before 4.14.5, the /events endpoint fails to appropriately enforce rate limits. Specifically, the system allows requests to the /events endpoint to succeed even if the overall request limit is exceeded, provided a specific events counter has not been hit. This flaw enables unauthorized event injections into the analysisd component, bypassing the intended global rate limit set by administrators. The issue has since been remedied in version 4.14.5.

References