SB2026090230 - Incorrect permission assignment for critical resource in Elastic Agent

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026090230

SB2026090230 - Incorrect permission assignment for critical resource in Elastic Agent

Published: September 2, 2026

Security Bulletin ID SB2026090230
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Incorrect permission assignment for critical resource (CVE-ID: CVE-2026-78604)

CWE-ID: CWE-732 - Incorrect Permission Assignment for Critical Resource

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to execute arbitrary code with SYSTEM privileges.

The vulnerability exists due to incorrect permission assignment for critical resource in resources used by the Elastic Agent service when running on Windows systems with Elastic Agent installed in unprivileged mode. A local user can replace binaries to execute arbitrary code with SYSTEM privileges.

Only Windows deployments using the unprivileged installation mode are affected.


Remediation

Install update from vendor's website.

References