Elastic Agent vulnerabilities

• elastic agent Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM CVE-2026-78604 7.8 HighSeptember 2, 2026
• elastic agent Elastic Agent Inclusion of Functionality from Untrusted Control Sphere CVE-2024-52976 4.4 MediumMay 1, 2025
• elastic agent, endpoint security, agent and elastic defend +2 more Elastic Agent / Elastic Endpoint Security local API key disclosure CVE-2023-46669 6.2 MediumMay 1, 2025
• elastic agent Elastic Agent Insertion of Sensitive Information into Log File CVE-2024-37283 6.5 MediumAugust 8, 2024
• elastic agent Elastic Agent Insertion of Sensitive Information into Log File CVE-2023-6687 6.8 MediumDecember 12, 2023
• elastic apm server, beats, agent +1 more +3 more Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue CVE-2023-31421 5.9 MediumOctober 26, 2023