{"id":"CVE-2026-115708","aliases":[],"cve":{"records":[{"id":"CVE-2026-115708","source":"elastic","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T11:09:48.309Z","published":"2026-10-29T14:10:01.656Z","modified":"2026-10-30T17:18:28.766Z"}],"publishers":[{"name":"elastic","role":"CNA","organizationId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","modified":"2026-10-29T14:10:01.656Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T17:18:28.766Z"}],"references":[{"url":"https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-6-and-4-2-1-security-update-esa-2026-215/391262","tags":[],"source":"elastic"}],"weaknesses":[{"id":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","source":"elastic"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T03:56:16.887825Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass","titleSource":"elastic","descriptionSource":"elastic","description":"Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to authentication bypass and unauthorized changes to the configuration of other deployments on the same host via Symlink Attack (CAPEC-132).","score":7.2,"severity":"high","published":"2026-10-29T14:10:01.656Z","modified":"2026-10-30T17:18:28.766Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Elastic","name":"Elastic Cloud Enterprise","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThanOrEqual":"3.8.5","versionType":"semver"},{"version":"4.0.0","status":"affected","lessThanOrEqual":"4.2.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"elastic","url":"https://www.cve.org/CVERecord?id=CVE-2026-115708"}],"remediation":[],"references":["https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-6-and-4-2-1-security-update-esa-2026-215/391262"],"sources":[{"name":"CVE","id":"CVE-2026-115708","modified":"2026-10-30T17:18:28.766Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115708"}],"assessments":[{"source":"elastic","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","score":7.2}],"sourceAffected":[],"observedAt":"2026-10-30T19:26:29.769Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T04:55:32.749Z","attemptedAt":"2026-10-30T04:55:32.749Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T04:55:32.429Z","attemptedAt":"2026-10-30T04:55:32.429Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T04:55:31.881Z","attemptedAt":"2026-10-30T04:55:31.881Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T04:55:31.594Z","attemptedAt":"2026-10-30T04:55:31.594Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-112921","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112921","modified":"Oct 29, 2026, 2:10:01 PM","score":7.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-10-30T04:55:31.881Z"},{"source":"GitHub Advisory Database","id":"GHSA-hh22-j7p9-f57f","url":"https://github.com/advisories/GHSA-hh22-j7p9-f57f","modified":"2026-10-29T15:31:03Z","score":7.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-10-30T04:55:32.429Z"},{"source":"NVD","id":"CVE-2026-115708","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115708","modified":"2026-10-30T04:18:18.110","score":7.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-10-30T04:55:32.749Z"}],"aiSummary":{"text":"Elastic Cloud Enterprise (ECE) versions 1.0.0 to 3.8.5 and 4.0.0 to 4.2.0 have an improper link resolution weakness, potentially allowing authentication bypass via symlink attack. The impact is unauthorized configuration changes. Local access is required.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:09:13.717Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115708"}]}}