File And Directory Information Exposure in Elastic Cloud Enterprise - CVE-2026-115711
Published: October 30, 2026
Vulnerability details
The vulnerability allows a remote privileged user on the local network to disclose container configuration secrets, including role tokens, and add unauthorized hosts to an Elastic Cloud Enterprise installation with the roles granted by those tokens.
The vulnerability exists due to insertion of sensitive information into an externally accessible file or directory in Elastic Cloud Enterprise's runtime information storage when storing platform service container configuration. A remote privileged user on the local network can access internal ECE platform services and read runtime information exposed to lower-privileged platform components to obtain secrets and use disclosed role tokens to add unauthorized hosts.