Login Request a demo
EA
Product
Elastic Agent
by Elastic · last CVE Sep 2, 2026
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elastic Agent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78604
7.8
0%
Sep 2
Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Affected: 8.0.0 through 8.19.20; 9.0.0 through 9.4.5; 9.5.0 through 9.5.1
CVE-2024-52976
7.8
0%
May 1
Elastic Agent Inclusion of Functionality from Untrusted Control Sphere
Affected: 7.0.0 through 7.17.24; 8.0.0 through 8.15.3
CVE-2023-31421
7.5
0%
Oct 26
Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
Affected: 8.0.0, 8.9.2
CVE-2023-46669
7.1
0%
May 1
Elastic Agent / Elastic Endpoint Security local API key disclosure
Affected: before 8.15.0
CVE-2024-37283
6.5
1%
Aug 8
Elastic Agent Insertion of Sensitive Information into Log File
Affected: 8.6.0 before 8.15.0
CVE-2023-6687
6.5
1%
Dec 12
Elastic Agent Insertion of Sensitive Information into Log File
Affected: 7.0.0, 8.0.0 before 7.17.16, 8.11.3
Showing 6