PT-2026-111570 · Wazuh · Wazuh Manager
CVSS v3.1
9.0
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H |
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload list file, upload rule file, and upload decoder file that allows malicious cluster workers to write files at arbitrary paths. Attackers holding the cluster key can send DistributedAPI requests with ../ sequences in filename, bypassing REST controller validation, to write files as the wazuh user.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wazuh Manager