Elastic Agent and Elastic Security Endpoint Local API Key Disclosure Vulnerability

A vulnerability exists in Elastic Agent and Elastic Security Endpoint versions prior to 8.15.0, allowing local unauthorized actors to access sensitive information. This exposure can lead to a breach of confidentiality and enable impersonation of the Endpoint within the Elastic Stack. The issue was discovered by Elastic engineers, who found no evidence of it being known or exploited by malicious actors.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, allowing for potential impersonation of the Endpoint in the Elastic Stack.

Remediation

Users can upgrade to Elastic Agent or Elastic Security Endpoint version 8.15.0 or later to address this vulnerability.