CVE-2026-115707 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to priv
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-115707?
CVE-2026-115707 is a medium-severity vulnerability in Elastic Cloud Enterprise, published on 29 Oct 2026.
Official description
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the installation can use this data to get full control of the ECE control plane and of the deployments that it manages.
Weakness: CWE-538
Which versions are affected by CVE-2026-115707?
How do I fix CVE-2026-115707?
No fix has been published for CVE-2026-115707 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-115707 being exploited?
There is no known exploitation of CVE-2026-115707 in the wild and no public exploit code.
Sources
Also known as GHSA-j27j-r2hf-x7q7.