CVE-2026-115709
CVE-2026-115709 · Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized disclosure and loss of data belonging to other deployments on the same host via Symlink Attack (CAPEC-132).
CVSS 8.2 · High · EPSS 0.3%
- Published
- Updated
Affected products and versions
elastic cloud enterprise
- Versions
- ≥ 2.6.0, ≤ 3.8.5: Affected (semver)
- ≥ 4.0.0, ≤ 4.2.0: Affected (semver)
No fix published