CVE-2026-74032

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.0.0 through 4.14.7

Description An authorization bypass allows low-privileged authenticated users to read the Role-Based Access Control (RBAC) catalog. By querying unprotected security endpoints, attackers can map privileged actions and endpoints to plan privilege escalation. The affected API endpoints are 'GET /security/actions' and 'GET /security/resources', which fail to apply the caller's RBAC policies.

Recommendations Update Wazuh to version 4.14.8 or later. Restrict access to the 'GET /security/actions' and 'GET /security/resources' endpoints to minimize the risk of exploitation.