4.4
Medium
CVE-2024-52976 Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local…
Description
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. An attacker requires local access and the ability to modify osqueryd configurations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Agent 8.0 | 8.0.0 → 8.15.3 | No fix stated |
| Elastic Agent 7.0 | 7.0.0 → 7.17.24 | No fix stated |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Elastic Agent
The 5 CVEs of Elastic Agent →
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege…
7.8
High
CVE-2024-37283
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the…
6.5
Medium
CVE-2023-6687
An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR…
6.8
Medium
CVE-2023-31421
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
5.9
Medium