CVE-2026-115709: Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss

Published Oct 29, 2026

Updated

Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized disclosure and loss of data belonging to other deployments on the same host via Symlink Attack (CAPEC-132).

Event History

Oct 29, 2026

CVE Published

via MITRE·02:10 PM

Data Sourced

via MITRE·02:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires local access and high privileges. No user interaction is required.

Which environments are at risk of cross-deployment impact?

The issue can expose or destroy data belonging to other ECE deployments that are hosted on the same machine as the affected deployment.

CVE-2026-115709: Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which environments are at risk of cross-deployment impact?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which environments are at risk of cross-deployment impact?