CVE-2026-90446

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description An API endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend path, leveraging the application's elevated service credentials to access unintended internal endpoints. This can lead to the enumeration or unauthorized reading of internal configuration and administrative data from the backend data store.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.