CVE-2024-52976 — Elastic Agent Inclusion of Functionality from Untrusted Control Sphere

CVE-2024-52976

Elastic Agent Inclusion of Functionality from Untrusted Control Sphere PUBLISHED

Description (CNA)

Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. An attacker requires local access and the ability to modify osqueryd configurations.

Affected (CNA)

Vendor / product	Versions
Elastic / Elastic Agent	affected 7.0.0 through 7.17.24; affected 8.0.0 through 8.15.3

CWE

CWE-829

References

https://discuss.elastic.co/t/elastic-agent-7-17-25-and-8-15-4-security-update-esa-2024-39/377708

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.