Elastic Elastic Agent
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-78604 | 8.0.0 – 8.19.20 ; 9.0.0 – 9.4.5 ; 9.5.0 – 9.5.1 | Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM | HIGH 7.8 | 0.1 % | ||
| CVE-2024-52976 | 7.0.0 – 7.17.24 ; 8.0.0 – 8.15.3 | Elastic Agent Inclusion of Functionality from Untrusted Control Sphere | HIGH 7.8 | 0.2 % | ||
| CVE-2024-37283 | 8.6.0 – < 8.15.0 | Elastic Agent Insertion of Sensitive Information into Log File | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-6687 | 7.0.0, 8.0.0 – < 7.17.16, 8.11.3 | Elastic Agent Insertion of Sensitive Information into Log File | MEDIUM 6.8 | 0.6 % | ||
| CVE-2023-31421 | 8.0.0, 8.9.2 | Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue | HIGH 7.5 | 0.3 % |