Search-guard vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Search-guard products: 3 record(s), with severity, exploitation and fixes.

Flx 3

Exploited only (KEV) →

CVE-2026-4819 Medium · 6.5 CWE-522 Mar 31, 2026

Search Guard audit logs can contain under certain conditions user credentials

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

CVE-2026-4818 High · 8.1 CWE-285 Mar 31, 2026

Some management operations on data streams are not properly restricted when user does not have the necessary privileges

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

CVE-2026-4799 Medium · 4.3 CWE-601 Mar 31, 2026

Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.