Advisories · Technology

Elastic Agent.

Every CVE that names Elastic Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78604 CVE record

CVSS 7.8 High

Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
- Elastic Agent
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2024-52976 CVE record

CVSS 4.4 Medium

Elastic Agent Inclusion of Functionality from Untrusted Control Sphere
- Elastic Agent
- CWE-829
Not analysed yet 1 May 2025
CVE-2024-37283 CVE record

CVSS 6.5 Medium

Elastic Agent Insertion of Sensitive Information into Log File
- Elastic Agent
- Information disclosure
Not analysed yet 8 Aug 2024
CVE-2023-6687 CVE record

CVSS 6.8 Medium

Elastic Agent Insertion of Sensitive Information into Log File
- Elastic Agent
- Information disclosure
Not analysed yet 12 Dec 2023
CVE-2023-31421 CVE record

CVSS 5.9 Medium

Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
- Elastic Beats
- Elastic Agent
- Weak cryptography or TLS
Not analysed yet 26 Oct 2023