Vulnerability Description
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the installation can use this data to get full control of the ECE control plane and of the deployments that it manages.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Elastic Cloud Enterprise | >= 2.6.0, < 3.8.6 |
Related Weaknesses (CWE)
References
- https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-6-and-4-2-1-securiMitigationVendor Advisory
FAQ
What is CVE-2026-115707?
CVE-2026-115707 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC...
How severe is CVE-2026-115707?
CVE-2026-115707 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115707?
Check the references section above for vendor advisories and patch information. Affected products include: Elastic Elastic Cloud Enterprise.