1. Home
  2. CVE Database
  3. CVE-2026-115713
HIGH · 7.5

CVE-2026-115713

Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host v...

Vulnerability Description

Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host via Symlink Attack (CAPEC-132).

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ElasticElastic Cloud Enterprise>= 4.1.0, < 4.2.1

Related Weaknesses (CWE)

CWE-59

References

FAQ

What is CVE-2026-115713?

CVE-2026-115713 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host v...

How severe is CVE-2026-115713?

CVE-2026-115713 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-115713?

Check the references section above for vendor advisories and patch information. Affected products include: Elastic Elastic Cloud Enterprise.