Configuration Exposure in Fleet Proxy by Elastic

CVE-2026-72670

What is CVE-2026-72670?

A vulnerability in Elastic's Fleet proxy allows users with limited read-only access to agent policies to illicitly retrieve the entire proxy configuration. This exposes sensitive information, including proxy authentication credentials and private key material, which should only be accessible to users with higher privileges. This security flaw emphasizes the need for robust access controls to safeguard critical configuration settings from unauthorized disclosure.

References