Improper Authorization in Elasticsearch Data Streams by Elastic

CVE-2026-102407

What is CVE-2026-102407?

A flaw in Elasticsearch enables an authenticated user with certain privileges to manipulate data streams without proper authorization. This occurs through the Modify Data Streams API, which allows potentially unauthorized modifications, like injecting data into streams that the user should not have access to. While this vulnerability does not permit reading of restricted data, it poses significant risks by altering the integrity and functionality of data streams, thereby impacting the overall security posture.

References