4.3
Medium
CVE-2026-115289 Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…
Description
Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached configuration expires. A service could also run with central configuration settings, such as sampling settings, that were meant for a different service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| APM Server 9.5 | 9.5.0 → 9.5.5 | No fix stated |
| APM Server 9.0 | 9.0.0 → 9.4.8 | No fix stated |
| APM Server 8.0 | 8.0.0 → 8.19.23 | No fix stated |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of APM Server
The 8 CVEs of APM Server →
CVE-2026-115716
Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized…
6.5
Medium
CVE-2026-78594
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via…
4.9
Medium
CVE-2025-0712
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory…
7.0
High
CVE-2024-11994
APM server logs could contain parts of the document body from a partially failed bulk index request
5.7
Medium