Improper Link Resolution Vulnerability in Elastic Cloud Enterprise by Elastic
CVE-2026-115713

7.5HIGH

Key Information:

Vendor

Elastic

Vendor
CVE Published:
29 October 2026

What is CVE-2026-115713?

An improper link resolution vulnerability exists in Elastic Cloud Enterprise, allowing attackers to exploit the 'Link Following' flaw. This vulnerability can enable unauthorized read and write access to sensitive data across different deployments hosted on the same server, potentially leading to significant data breaches. Users are advised to implement security updates promptly to mitigate risks associated with symlink attacks.

Affected Version(s)

Elastic Cloud Enterprise 4.1.0 <= 4.2.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.