CVE-2026-74031

Wazuh versions 4.1.1 before 4.14.8 are vulnerable to a path traversal flaw in the delete_rule_file and delete_decoder_file helpers. This issue stems from an unvalidated filename parameter , which allows malicious cluster workers holding the cluster key to invoke these helpers via the DistributedA...