Path Traversal Vulnerability in Wazuh by Wazuh
CVE-2026-74043

8.5HIGH

Key Information:

Vendor

Wazuh

Status
Wazuh-manager
Vendor
CVE Published:
13 October 2026

What is CVE-2026-74043?

Wazuh versions 4.1.1 to 4.14.8 have a path traversal vulnerability that enables malicious users to exploit the system through the upload_list_file, upload_rule_file, and upload_decoder_file functions. By sending specially crafted DistributedAPI requests with '../' sequences in the filename, attackers can bypass REST controller validation and write files to arbitrary locations on the server as the wazuh user. This vulnerability could lead to unauthorized access or manipulation of the server's filesystem.

Affected Version(s)

wazuh-manager 4.1.1 < 4.14.8

wazuh-manager 4.14.8

References

https://github.com/wazuh/wazuh/security/advisories/GHSA-c...
vendor-advisory
https://github.com/wazuh/wazuh/releases/tag/v4.14.8
patchrelease-notes
https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

namd0ng
vikman90
.