PT-2026-29280 · Elastic · Search Guard Flx
CVE-2026-4818
·
Published
2026-03-31
·
Updated
2026-07-24
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Search Guard FLX versions 3.0.0 through 4.0.1
Description
An issue exists in Search Guard FLX that allows users lacking appropriate permissions to perform certain management operations on data streams.
Recommendations
Update Search Guard FLX to a version newer than 4.0.1.
Fix
Missing Authorization
Improper Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Search Guard Flx