Improper Authentication in Elasticsearch by Elastic

CVE-2025-37731

What is CVE-2025-37731?

The improper authentication issue present in Elasticsearch's PKI realm enables potential user impersonation. This vulnerability allows an attacker with a specially crafted client certificate—if signed by a legitimate, trusted Certificate Authority—to impersonate users within the system. This can lead to unauthorized access and control over user accounts, posing significant security risks to organizations relying on Elasticsearch for their data storage and management needs.

References