THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-49441 (CRITICAL 9.1) — Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_worker() in framework/wazuh/core/cluster/master.py trusts a peer-controlled file_path key from files_

[NVD] CVE-2026-49441 (CRITICAL 9.1) — Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_worker() in framework/wazuh/core/cluster/master.py trusts a peer-controlled file_path key from files_

mednvdPublished 2026-08-19

CVE-2026-49441 CVSS: 9.1 CRITICAL Published: 2026-08-19T17:18:54.073

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_worker() in framework/wazuh/core/cluster/master.py trusts a peer-controlled file_path key from files_metadata.json. The destination is joined to WAZUH_

Indicators of compromise

CVE-2026-49441cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-49441