Denial of Service Vulnerability in Elastic Endpoint by Elastic
CVE-2026-102413

6.2MEDIUM

Key Information:

Vendor

Elastic
Status
Elastic Agent And Elastic Defend
Vendor
CVE Published:
6 October 2026

What is CVE-2026-102413?

An unhandled exception in Elastic Endpoint can occur when processing specially crafted filenames under certain system locale configurations, notably Chinese, Japanese, and Korean, on Windows operating systems. This leads to the Elastic Endpoint process crashing and restarting incessantly, which significantly hampers the real-time malware prevention and behavioral detection features of Elastic Defend, potentially leaving the affected systems vulnerable to threats as long as the issue remains unaddressed.

Affected Version(s)

Elastic Agent and Elastic Defend 8.19.13 <= 8.19.21

Elastic Agent and Elastic Defend 9.2.7 <= 9.2.8

Elastic Agent and Elastic Defend 9.3.0 <= 9.3.8

References

https://discuss.elastic.co/t/elastic-agent-endpoint-8-19-...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.