CVE-2026-41424

Katalog CVE

CVSS 8.2 · High EPSS 0,47%

Kerentanan Incorrect Authorization pada wazuh. Skor CVSS 3.1 8.2 (High) menurut github.com.

Deskripsi (NVD)

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/{user_id} in api/api/controllers/security_controller.py passes request.get("user") instead of request.context['token_info']['sub'] as current_user. remove_nones_to_dict() removes the resulting None value, so the reserved-account protection in framework/wazuh/security.py cannot verify who is making the request. An authenticated user with the users_admin role can overwrite the password of protected administrator accounts with user IDs at or below 99, including the wazuh superuser, and gain full administrative control. This issue is fixed in versions 4.10.4 and 4.14.6.

Rincian

Terbit di NVD

19 Agustus 2026

Terakhir diubah

18 September 2026

Status NVD

Analyzed

CVSS 3.1

8.2 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wazuh/wazuh/security/advisories/GHSA-gj9h-8hmr-xjjr exploit · advisory vendor
• https://github.com/wazuh/wazuh/commit/1a38d11574c6d35a4272e1e7145d55d293e7dda4 patch
• https://github.com/wazuh/wazuh/commit/813add3575ecd4df484b2326715ca78f65505b4e patch
• https://github.com/wazuh/wazuh/pull/35442 issue tracking · patch
• https://github.com/wazuh/wazuh/pull/35469 issue tracking · patch
• https://github.com/wazuh/wazuh/releases/tag/v4.10.4 release notes
• https://github.com/wazuh/wazuh/releases/tag/v4.14.6 release notes