SB20261007242 - Incorrect authorization in Elasticsearch

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261007242

SB20261007242 - Incorrect authorization in Elasticsearch

Published: October 7, 2026

Security Bulletin ID SB20261007242
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Incorrect authorization (CVE-ID: CVE-2026-102407)

CWE-ID: CWE-863 - Incorrect Authorization

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to modify data streams without authorization, potentially injecting data or disrupting normal searches.

The vulnerability exists due to incorrect authorization in the Modify Data Streams API when processing data stream modification requests. A remote user can invoke the API against a data stream outside their authorized access to modify data streams without authorization, potentially injecting data or disrupting normal searches.

Exploitation requires sufficient privileges over a single resource. Affected configurations use Elasticsearch Security (role-based access control) together with data streams; no non-default configuration is required. The issue does not permit reading the contents of otherwise inaccessible data streams.


Remediation

Install update from vendor's website.

References