Sensitive Information Exposure in Elastic Cloud Enterprise by Elastic

CVE-2026-115711

What is CVE-2026-115711?

A vulnerability exists in Elastic Cloud Enterprise (ECE) where sensitive information can be exposed due to improper storage practices. This issue allows lower-privileged platform components to access runtime information, including secrets from container configurations. An attacker with internal access to the ECE services may exploit this vulnerability to retrieve sensitive data, such as role tokens, potentially enabling them to add unauthorized hosts and manipulate the installation using the roles associated with those tokens.

References