CVE-2026-56144

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description Insufficient authorization controls in the ingest simulation feature allow an authenticated user with limited index privileges to target indices they are not authorized to access directly. This can lead to the execution of configured ingest pipelines and the return of their output, potentially disclosing processed or enriched data. Furthermore, this feature can be exploited to retrieve index mapping metadata for unauthorized indices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.