CVE-2026-74036

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.3.0 through 4.14.7

Description A remote code execution issue exists where the trust for Security Configuration Assessment (SCA) policies is determined by the file path instead of the configuration source. An attacker with control over a manager can write unsigned policy files to the var/incoming directory using the upgrade channel and reference them to execute command checks with root privileges on agents.

Recommendations Update to version 4.14.8 or later.