{"id":"CVE-2026-115713","aliases":[],"cve":{"records":[{"id":"CVE-2026-115713","source":"elastic","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T11:09:48.310Z","published":"2026-10-29T14:10:08.088Z","modified":"2026-10-30T03:56:09.946Z"}],"publishers":[{"name":"elastic","role":"CNA","organizationId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","modified":"2026-10-29T14:10:08.088Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T03:56:09.946Z"}],"references":[{"url":"https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-4-2-1-security-update-esa-2026-222/391266","tags":[],"source":"elastic"}],"weaknesses":[{"id":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","source":"elastic"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification","titleSource":"elastic","descriptionSource":"elastic","description":"Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host via Symlink Attack (CAPEC-132).","score":7.5,"severity":"high","published":"2026-10-29T14:10:08.088Z","modified":"2026-10-30T03:56:09.946Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Elastic","name":"Elastic Cloud Enterprise","platforms":[],"versions":[{"version":"4.1.0","status":"affected","lessThanOrEqual":"4.2.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"elastic","url":"https://www.cve.org/CVERecord?id=CVE-2026-115713"}],"remediation":[],"references":["https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-4-2-1-security-update-esa-2026-222/391266"],"sources":[{"name":"CVE","id":"CVE-2026-115713","modified":"2026-10-30T03:56:09.946Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115713"}],"assessments":[{"source":"elastic","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-10-30T04:12:29.023Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:15:31.262Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T04:15:35.705Z","attemptedAt":"2026-10-30T04:15:35.705Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T04:15:35.871Z","attemptedAt":"2026-10-30T04:15:35.871Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T04:15:36.402Z","attemptedAt":"2026-10-30T04:15:36.402Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T04:15:35.526Z","attemptedAt":"2026-10-30T04:15:35.526Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-115713","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115713","modified":"2026-10-29T17:18:01.730","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:35.705Z"},{"source":"GitHub Advisory Database","id":"GHSA-vr5j-v5qj-vvp7","url":"https://github.com/advisories/GHSA-vr5j-v5qj-vvp7","modified":"2026-10-29T15:30:59Z","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:35.871Z"},{"source":"ENISA EUVD","id":"EUVD-2026-112925","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112925","modified":"Oct 29, 2026, 4:49:20 PM","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-10-30T04:15:36.402Z"}],"aiSummary":{"text":"Elastic Cloud Enterprise (ECE) versions 4.1.0 to 4.2.0 have an improper link resolution weakness, potentially allowing unauthorized data access and modification. The vulnerability requires an attacker to have access to the host. This may lead to information disclosure and data modification.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:11:09.621Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115713"}]}}