CVE-2026-74033

Wazuh versions 4.1.1 through 4.14.8 are vulnerable to a path traversal flaw within the get_lists() and delete_list_file() CDB list handlers. This vulnerability allows compromised cluster workers to bypass REST validation and RBAC by sending traversal or absolute-path filenames through the interna...