Known vulnerabilities in Elastic Agent

Vendor: Elastic Stack
Software: Elastic Agent
Software CPE: cpe:2.3:a:elastic_stack:elastic_agent:*:*:*:*:*:*:*:*
Website: https://www.elastic.co/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Elastic Agent Elastic Agent is affected by 4 known vulnerabilities: 1 medium, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146674 - Incorrect Permission Assignment for Critical Resource
CVE-2026-78604		 CWE-732 Low
No
No
 8.19.21, 9.4.6, 9.5.2 02.09.2026 SB2026090230
#VU108116 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46669		 CWE-200 Low
No
No
 8.15.0 01.05.2025 SB2025050128
#VU108115 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2024-52976		 CWE-829 Low
No
No
 7.17.25, 8.15.4 01.05.2025 SB2025050127
#VU95623 - Information Exposure Through Log Files
CVE-2024-37283		 CWE-532 Medium
No
No
 8.15.0 09.08.2024 SB2024080933