Medium · 6.8 CVE-2026-4818 EUVD-2026-17506GHSA-73g6-24f6-wqv9

Some management operations on data streams are not properly restricted when user does not have the necessary privileges

Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by floragunn

Vendor: floragunn Product: Search Guard FLX

Description

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

Affected products

Vendor	Product	Affected	Fixed
floragunn	Search Guard FLX	3.0.0 – ≤ 4.0.1	—

References

https://search-guard.com/cve-advisory/
https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0

CNA	v3.1	6.8
EUVD	v3.1	6.8