CVE-2026-4818 — Some management operations on data streams are not properly restricted when user does not have the necessary privileges

CVE-2026-4818

Some management operations on data streams are not properly restricted when user does not have the necessary privileges PUBLISHED

Description (CNA)

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

Affected (CNA)

Vendor / product	Versions
floragunn / Search Guard FLX	affected 3.0.0 through 4.0.1

CWE

CWE-285, CWE-862

References

https://search-guard.com/cve-advisory/
https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.