CVE-2026-4818

MediumCVSS 6.8

Published: 31/03/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Search Guard FLX versions 3.0.0 through 4.0.1 allow users without the necessary privileges to execute management operations on data streams.

Risk Assessment

Unauthorized users can modify or disrupt data streams, potentially leading to data integrity loss or service interruptions.

Recommendation

Update Search Guard FLX to a version above 4.0.1, where the issue has been fixed.

Original NVD description (English source)

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.