CVE-2026-93347

4.9 MEDIUMpublic exploit available

Published 2026-10-13 · Updated 2026-10-14

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read client.keys, ossec.conf with the cluster key, and other wazuh-readable files.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-22

Public exploit & PoC references

https://github.com/wazuh/wazuh/releases/tag/v4.14.8
https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g
https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g

All references

https://github.com/wazuh/wazuh/releases/tag/v4.14.8
https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g
https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4.14.8-path-traversal-via-cluster-get-list-file
https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2014-125130PoC
HIGHCVE-2017-20284
HIGHCVE-2021-48011PoC
HIGHCVE-2023-54403PoC
MEDIUMCVE-2024-58386PoC
HIGHCVE-2024-58387PoC
HIGHCVE-2024-58388PoC
MEDIUMCVE-2025-1280

Related by shared AI tags and CWE weakness class. Browse the full archive.