CVE-2026-4818
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Search Guard FLX versions 3.0.0 through 4.0.1 allow users without the necessary privileges to execute management operations on data streams.
Risk Assessment
Unauthorized users can modify or disrupt data streams, potentially leading to data integrity loss or service interruptions.
Recommendation
Update Search Guard FLX to a version above 4.0.1, where the issue has been fixed.
Other vulnerabilities in Search Guard FLX
See all- CVE-2026-4819Medium
In Search Guard FLX from version 1.0.0 up to 4.0.1, a vulnerability was found where the audit logging feature might log user credentials from users logging into Kibana.
- CVE-2026-4799Medium
Search Guard FLX up to version 4.0.1 allows redirecting users to an untrusted URL via specially crafted requests.
Original NVD description (English source)
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS