PT-2026-111561

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete rule file and delete decoder file helpers that allows malicious cluster workers to delete arbitrary files via an unvalidated filename parameter. Attackers holding the cluster key can invoke these helpers through...