CVE-2026-46343

Wazuh is a free and open source platform used for threat prevention, detection, and response.

Wazuh

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, WazuhCommon.end_receiving_file() in framework/wazuh/core/cluster/common.py allows a cluster-authenticated node to delete files outside WAZUH_PATH. A syn_i_w_m_e request with an unknown task_id reaches the cleanup branch, where an attacker-controlled filename is passed to os.path.join without canonicalization or confinement. Absolute paths and…

19. Aug 2026

Ausgewertete Quellen

• NVD
  CVE-2026-46343
• GitHub
  https://github.com/wazuh/wazuh/security/advisories/GHSA-cqvw-w2rg-327f