| CVE-2026-78604 |
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege…
|
7.8
High
|
Sep 2, 2026 |
| CVE-2024-52976 |
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local…
|
4.4
Medium
|
May 1, 2025 |
| CVE-2024-37283 |
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the…
|
6.5
Medium
|
Aug 8, 2024 |
| CVE-2023-6687 |
An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR…
|
6.8
Medium
|
Dec 12, 2023 |
| CVE-2023-31421 |
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
|
5.9
Medium
|
Oct 26, 2023 |