Information Disclosure Vulnerability in Wazuh by Wazuh

CVE-2026-74047

What is CVE-2026-74047?

An information disclosure vulnerability in Wazuh allows low-privileged users with the agent:read permission to access sensitive information. Specifically, attackers can retrieve the plaintext authd.pass enrollment password through an unmasked agent configuration endpoint. By exploiting this flaw, users holding the default readonly role can request configuration details for pseudo-agent ID 000, thus obtaining secrets that enable unauthorized agents to enroll against the manager. This vulnerability poses a significant risk to the integrity and security of Wazuh deployments if not addressed.

References