CVE-2026-61800

Wazuh (open-source XDR/SIEM platform) versions 4.4.0 through 4.14.6 contain a flaw in cluster file synchronization. In the non-merged branch of update_master_files_in_worker() , staged files are moved to a destination derived only from safe_join(), which confines the path to /var/ossec but never ...