Live › vulnerability › CVE-2026-115706
Elastic Cloud Enterprise has an authorization bypass where a user-controlled key lets an attacker obtain credentials reserved for other platform roles. An attacker who controls any host in an installation can take full control of the ECE control plane and the deployments it manages.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Organisations that self-host Elastic Cloud Enterprise to run Elasticsearch and related deployments. The risk comes from any host inside the ECE installation being able to obtain credentials for other roles. The sources do not name affected versions, so teams should check their own ECE version against Elastic's advisory.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Privilege Abuse (CAPEC-122). An attacker who controls any host in an ECE installation can obtain credentials that are reserved for other platform roles. These credentials can give the attacker full control of the ECE control plane and of the deployments that it manages.
This page as .md · .json · in your agent: get_signal("CVE-2026-115706")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.