Authentication Bypass Vulnerability in Wazuh by Wazuh

CVE-2026-74035

What is CVE-2026-74035?

Wazuh versions prior to 4.14.8 are susceptible to an authentication bypass vulnerability. This flaw stems from a mishandling of security checks in the 'security.update_user' endpoint, wherein the reserved user guard and password policy are enclosed within a falsy truthiness check. As a result, a delegated user administrator could potentially bypass authentication restrictions by sending an empty password, thereby compromising the Wazuh superuser account and gaining unauthorized access.

References