EA
Product
Elastic Agent
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Elastic Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78604 | 7.8 | Sep 2 | Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM Affected: 8.0.0 through 8.19.20; 9.0.0 through 9.4.5; 9.5.0 through 9.5.1 |
| CVE-2024-52976 | 7.8 | May 1 | Elastic Agent Inclusion of Functionality from Untrusted Control Sphere Affected: 7.0.0 through 7.17.24; 8.0.0 through 8.15.3 |
| CVE-2023-31421 | 7.5 | Oct 26 | Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue Affected: 8.0.0, 8.9.2 |
| CVE-2023-46669 | 7.1 | May 1 | Elastic Agent / Elastic Endpoint Security local API key disclosure Affected: before 8.15.0 |
Showing 4