medium6.5
CVE-2026-74047
Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext auth…
Impact
Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth component configuration for pseudo-agent ID 000 to obtain the secret and enroll rogue agents against the manager.
Affected products
| Product | Affected versions |
|---|---|
| Wazuh From 4.0.0 | before 4.14.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.