CVE-2026-78607

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description Missing authorization in the custom inference service allows a user with only inference execution privileges to redirect outbound inference traffic to an arbitrary destination. This privilege abuse can lead to the exposure of credentials provisioned by the administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.