Authorization Bypass in Elastic Cloud Enterprise by Elastic

CVE-2026-115706

What is CVE-2026-115706?

An authorization bypass flaw in Elastic Cloud Enterprise allows attackers to exploit user-controlled keys, potentially leading to privilege escalation. This vulnerability enables malicious users, who have access to any host within an ECE installation, to manipulate their credentials and gain unauthorized access to sensitive roles. Consequently, this can result in full control over the ECE control plane and the deployments it oversees, posing significant security risks.

References