File And Directory Information Exposure in Elastic Cloud Enterprise - CVE-2026-115707
Published: October 30, 2026
Vulnerability identifier: #VU158528
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-115707
CWE-ID: CWE-538
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote privileged user on the local network to escalate privileges and gain full control of the ECE control plane and the deployments it manages.
The vulnerability exists due to insertion of sensitive information into externally accessible files or directories in the Elastic Cloud Enterprise certificate rotation procedure when retaining rotation data readable by lower-privileged platform components. A remote privileged user on the local network can retrieve platform credentials and certificate authority private keys from this data to gain full control of the ECE control plane and its managed deployments.
Affected software
Elastic Cloud Enterprise
How to mitigate CVE-2026-115707
Install security update from vendor's website.
Elastic Cloud Enterprise - addressed in versions 3.8.6, 4.2.1