CVE Catalog
CVE-2026-4819
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
In Search Guard FLX from version 1.0.0 up to 4.0.1, a vulnerability was found where the audit logging feature might log user credentials from users logging into Kibana.
Risk Assessment
The risk involves potential leakage of passwords or authentication tokens to log files, which could lead to unauthorized access.
Recommendation
It is recommended to upgrade to a version above 4.0.1 and review audit configuration to avoid logging sensitive data.
Original NVD description (English source)
In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.