CVE-2026-112340Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request

Açıklama

Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace the server-side session Bearer token, letting them act as another Manager API identity or send unauthenticated upstream requests.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• GitHub Security Advisory (GHSA-7rvv-9467-96mc) vendor-advisorythird-party-advisory
• wazuh-dashboard-plugins v4.14.9 Release Notes release-notes
• VulnCheck Advisory: Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request third-party-advisory