Authorization Bypass Vulnerability in Wazuh by Oxeye

CVE-2026-74032

What is CVE-2026-74032?

Wazuh versions 4.0.0 through versions prior to 4.14.8 contain an authorization bypass vulnerability. This security flaw allows low-privileged authenticated users to access information from unprotected security endpoints. By making requests to /security/actions and /security/resources, these users can bypass RBAC (Role-Based Access Control) policies, enabling them to view the RBAC catalog. This access could facilitate privilege escalation by allowing attackers to identify privileged actions and endpoints that they can exploit.

References