CVE-2026-4799
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Search Guard FLX up to version 4.0.1 allows redirecting users to an untrusted URL via specially crafted requests.
Risk Assessment
An attacker could use this for phishing, redirecting users to malicious sites and stealing their credentials.
Recommendation
Update Search Guard FLX to a version later than 4.0.1. Implement server-side URL validation.
Other vulnerabilities in Search Guard FLX
See all- CVE-2026-4819Medium
In Search Guard FLX from version 1.0.0 up to 4.0.1, a vulnerability was found where the audit logging feature might log user credentials from users logging into Kibana.
- CVE-2026-4818Medium
Search Guard FLX versions 3.0.0 through 4.0.1 allow users without the necessary privileges to execute management operations on data streams.
Original NVD description (English source)
In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS