CVE-2026-112340
Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that…
- Risk score
- 49/100
- CVSS
- 8.2 v3.1
- Published
- 6 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace the server-side sessi…
- Affected
- See advisory
- Fix
- Upgrade the product to 4.14.9 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.2 high
References
Original description
Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace the server-side session Bearer token, letting them act as another Manager API identity or send unauthenticated upstream requests.
Last activity 6 Nov 2026. Patch Forecast updates every hour.