CVE-2026-74034

Wazuh versions 4.1.0 before 4.14.8 are vulnerable to an arbitrary file read vulnerability due to a missing origin check in the wm_agent_upgrade component. This flaw allows enrolled agents to issue upgrade_custom commands using an attacker-controlled file_path . An attacker can inject an upgrade_c...

PT-2026-60121

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...