CVE-2026-115713: Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host via Symlink Attack (CAPEC-132).
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
ECE deployments that share the same host are exposed to potential unauthorized data access or modification across deployment boundaries. The issue is relevant where an attacker can carry out a symlink attack against file access on that host.
What level of access does an attacker need?
The severity vector indicates local access, high attack complexity, and high privileges are required. No user interaction is required.
What is the potential impact if exploitation succeeds?
An attacker may obtain unauthorized read and write access to data belonging to other deployments on the same host. The stated impact includes information disclosure and data modification, with high confidentiality, integrity, and availability impact.