Authorization Flaw in Elasticsearch Leads to Data Exposure

CVE-2026-115298

What is CVE-2026-115298?

A vulnerability in Elasticsearch allows authenticated users with restricted index access to retrieve sensitive data from fields that should be protected by field-level security. This issue arises from an inadequate implementation of access control measures, allowing users to access constant_keyword fields despite their role restrictions. As a result, data that should be secured can be inadvertently exposed, raising significant privacy and security concerns for organizations using Elasticsearch.

References