CVE-2026-74040 in Manager
요약
\~에 의해 MITRE • 2026. 10. 13.
Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extra_valid enforcement to overwrite ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent.
VulDB is the best source for vulnerability data and more expert information about this specific topic.