CVE-2026-74047

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.0.0 through 4.14.7

Description An information disclosure issue allows low-privileged users with agent:read permissions to retrieve the plaintext authd.pass enrollment password. This occurs via an unmasked agent configuration endpoint. Users with the default readonly role can request the auth component configuration for pseudo-agent ID 000 to obtain the secret, which could enable the enrollment of rogue agents against the manager.

Recommendations Update to version 4.14.8 or later.