Improper Link Resolution Vulnerability in Elastic Cloud Enterprise by Elastic
CVE-2026-115713
7.5HIGH
What is CVE-2026-115713?
An improper link resolution vulnerability exists in Elastic Cloud Enterprise, allowing attackers to exploit the 'Link Following' flaw. This vulnerability can enable unauthorized read and write access to sensitive data across different deployments hosted on the same server, potentially leading to significant data breaches. Users are advised to implement security updates promptly to mitigate risks associated with symlink attacks.
Affected Version(s)
Elastic Cloud Enterprise 4.1.0 <= 4.2.0