Critical Wazuh Vulnerability Enables Lateral Movement and Root Access

Wazuh patched CVE-2026-30893, a critical (CVSS 9.0) path traversal in its cluster synchronization process that allows an authenticated peer to craft archives with traversal paths and overwrite arbitrary files on receiving nodes, potentially achieving remote code execution and lateral spread across clusters; the impact ranges from service-level code execution to full system takeover in containerized/root deployments, and administrators are urged to apply the released fix immediately.