The host is installed with Wazuh 4.0.0 through 4.0.3 and is prone to a path traversal vulnerability. A flaw is present in the application, which fails to handle an issue in /manager/files and /cluster/{node_id}/files endpoints. Successful exploitation could allow authenticated attackers to execute arbitrary code with administrative privileges via /manager/files URI.