CVE-2026-112340

Name of the Vulnerable Software and Affected Versions Wazuh dashboard versions 4.9.0 through 4.14.8

Description Authenticated dashboard users can bypass authorization by overriding the Manager API Authorization header through the '/api/request' proxy endpoint. By providing nested body.headers.Authorization values, an attacker can replace the server-side session Bearer token, enabling them to impersonate another Manager API identity or transmit unauthenticated upstream requests.

Recommendations Update Wazuh dashboard to version 4.14.9 or later. Restrict access to the '/api/request' proxy endpoint to minimize the risk of exploitation.