Path Traversal Vulnerability in Elastic Maps Server by Elastic

CVE-2026-78602

What is CVE-2026-78602?

An improper limitation in Elastic Maps Server allows unauthenticated attackers to perform Path Traversal attacks. This vulnerability enables access to files stored outside the intended content directory, leading to potential information disclosure. Attackers with network access to the service may exploit this flaw to read sensitive files that are otherwise inaccessible, posing a significant risk to data security.

References