CVE-2026-74047

Wazuh versions 4.0.0 before 4.14.8 are susceptible to an information disclosure vulnerability. Low-privileged users with agent:read permissions (specifically the default readonly role) can access the unmasked agent configuration endpoint. By requesting the auth component configuration for pseudo-...