Description
In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| floragunn | Search Guard FLX | 1.0.0 – ≤ 4.0.1 | — |
Medium · 4.9
CVE-2026-4819
EUVD-2026-17507GHSA-vx77-83rf-gfvg
Search Guard audit logs can contain under certain conditions user credentials
Published Mar 31, 2026 · Updated Mar 31, 2026 · Assigned by floragunn