Description
In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| floragunn | Search Guard FLX | 1.0.0 – ≤ 4.0.1 | — |
Medium · 4.3
CVE-2026-4799
EUVD-2026-17474GHSA-mq38-9qw3-63h6
Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by floragunn