{"id":"CVE-2025-25013","aliases":["EUVD-2025-14853","GHSA-p999-j4hq-pmj3"],"status":"published","title":"Elastic Defend Insertion of Sensitive Information into Log Files","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00371,"percentile":0.31314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2025-04-08T22:16:00Z","modified":"2026-06-17T08:59:59Z","products":[{"vendor":"elastic","product":"elastic defend"}],"references":[{"url":"https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25013"},{"url":"https://github.com/advisories/GHSA-p999-j4hq-pmj3"}],"sources":{"cve":[{"id":"CVE-2025-25013","title":"Elastic Defend Insertion of Sensitive Information into Log Files","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","status":"published","published":"2025-04-08T22:16:00.886Z","modified":"2025-04-09T19:28:32.185Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-14853","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","status":"published","published":"2025-04-08T22:16:00Z","modified":"2025-04-09T19:28:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:37.733624Z"}],"ghsa":[{"id":"GHSA-p999-j4hq-pmj3","title":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive...","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","status":"published","published":"2025-04-09T00:30:27Z","modified":"2025-04-09T00:30:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:00:52.300715Z"}],"nvd":[{"id":"CVE-2025-25013","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","status":"published","published":"2025-04-08T23:15:45.54Z","modified":"2026-06-17T08:59:59.88Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:11:00.087098Z"}]}}