最新のセキュリティ情報
10月7日(水)
Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-199)
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch contains an authorization bypass weakness in its handling of cross-cluster search requests made through the Remote Cluster Security (RCS) 2.0 model. An authorization check validates a request against one identifying attribute of the target shard, while a separate, indepe…
Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-198)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds and serializes geometry values produced by scripted runtime fields. Unlike geometry supplied as text, which is subject to a nesting-depth limit, geometry constructed from a script's output is not bounded. An authenticated user wit…
Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-197)
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets an administrator delegate limited role-management capability to another user, scoped to specific indices. The authorization check that enforces this scoping does not correctly account for a role-definition setting that can expan…
Elasticsearch 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-196)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated user with read access to a single index can submit a specially crafted request containing deeply nested aggregation definitions. Processing this request triggers unbounded recursive execution that exhausts the server process's availab…
Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-195)
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an excessively large description field are created and subsequently accessed, exhausting available heap memory and crashing the affected node. Affected Versions: 8.x: All versions from 8.12.0 up to and including…
Elastic Agent / Endpoint 8.19.22, 9.4.8, and 9.5.5 Security Update (ESA-2026-194)
Uncaught Exception in Elastic Endpoint Leading to Denial of Service Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations (including Chinese, Japanese, and Korean locales) on Windows, an unhandled exception can occur during file-path handling. This causes the Elastic Endpoint process to crash and restart repeatedly, which can degrade or disable Elastic Defend's real-time malware prevention and behavioral detection capabil…
Kibana 9.4.8, 9.5.5 Security Update (ESA-2026-193)
Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Kibana user with limited Fleet management privileges could access sensitive credential material that should be restricted to users with Fleet settings administrative access. Successful exploitation could allow an attacker to obtain private cryptographic key material configured for Fleet Server host connections, potentially enabling impersona…
Elasticsearch 9.4.7, 9.5.3, 8.19.23 Security Update (ESA-2026-192)
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used when multiple such resources are retrieved together. A user holding the manage_index_templates cluster privilege can register multiple resources each within the individual limit. Retrieving them toget…
Kibana 9.4.0 Security Update (ESA-2026-191)
Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the same feature did enforce. As a result, a user who held only data-store-level read access to an index, but no corresponding Kibana feature privilege, could retrieve index-derived metric data through Kibana that the properly-authorize…
Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130). Affected Versions: 9.x: All versions from 9.2.0 up to and including 9.2.8 All versions from 9.3.0 up to and including 9.3.8 All versions from 9.4.0 up to and including 9.4.7 All versions from 9.5.0 up to and including 9.5.4 No fix is available for the 9.2.x or 9.3.x release lines. Users should upgrade to a supported rele…
Elasticsearch 8.19.22, 9.4.8, and 9.5.5 Security Update (ESA-2026-189)
Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-492). The ES|QL CHUNK function's recursive chunking strategy accepts a list of user-supplied regular expressions used as text-splitting separators, without validating their computational complexity or bounding their execution time. An authenticated user with read access to any text-based index can submit a specially crafted regular expression that triggers cat…
Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-188)
Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data stream to which they were not otherwise authorized, potentially injecting data into it or affecting its ability to be searched normally. This issue does not allow an attacker to read the contents of a data str…
Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187)
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation process allowed a user holding delegated Fleet package-management privileges, without direct Elasticsearch administrative privileges, to claim a data stream identifier already in use by another tenant. Bec…
Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185)
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memory condition that terminates the Elasticsearch node. The condition can be triggered repeatedly, including by queries embedded in shared resources, causing persistent cluster unavailability. Affected Versions: 8.x: All v…
9月25日(金)
Elasticsearch 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-184)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.3. The versions above are the first releases that contain the fix where later releases al…
Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-183)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases al…
Elasticsearch 9.4.7, 9.5.4 Security Update (ESA-2026-182)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 9.x: All versions from 9.2.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases also contain it. Elastic recommends upgrading to the most recent rel…
Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-181)
Uncontrolled Resource Consumption in Kibana Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.3. The versions above are the first releases that contain the fix where later releases also contain it.…
Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-180)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases al…
Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-179)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.12.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases a…
Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations where authenticated users have privileges to invoke index analysis APIs. Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. For Users…
Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.20 9.x: All versions from 9.0.0 up to and including 9.4.5 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations with analytical aggregation search capabilities enabled. Solutions and Mitigations: The issue is resolved in versions 8.19.21, 9.4.6, 9.5.3. For Users that Cannot Up…
Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-139)
Missing Authorization in Kibana Leading to Unauthorized Deletion of Data Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks tha…
Kibana 8.19.22, 9.4.6 Security Update (ESA-2026-103)
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline feature privilege in a Kibana space could enumerate, read, modify, and delete draft Timeline objects belonging to other users in the same space. Read access is sufficient for enumeration and disclosure; the Timeli…
Kibana 9.4.7, 9.5.0 Security Update (ESA-2026-85)
Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts with that agent. Where the same user can also author workflows, this can extend to full administrative control of Kibana and of the Elasticsearch cluster. Affected Versions: 9.x: All versions from 9.4.0…