PT-2025-51212 · Elastic · Elasticsearch

Ikakavas + 1 · Published 2025-12-15 · Updated 2026-04-28 · CVE-2025-37731

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description A flaw exists in the PKI realm authentication process within Elasticsearch. This issue allows a malicious actor to impersonate users by presenting a specially crafted client certificate signed by a trusted Certificate Authority. Successful exploitation requires the attacker to possess such a certificate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Improper Authentication

Weakness Enumeration

CWE-295

CWE-287

Related Identifiers

BIT-ELASTICSEARCH-2025-37731

CVE-2025-37731

GHSA-M9GH-789G-Q5PV

Affected Products

Elasticsearch

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-37731 · Security Note
• https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-27/384063 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m9gh-789g-q5pv · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-APP-MAVEN-CVE-2025-37731 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-37731 · Vendor Advisory
• https://github.com/elastic/elasticsearch · Note
• https://github.com/elastic/elasticsearch/commit/d8a408da79f214395845d99d241e832077045983 · Note
• https://github.com/elastic/elasticsearch/commit/e519fe4c51a3c887675eb7daea2f914738847f23 · Note
• https://github.com/elastic/elasticsearch/commit/cd97b8566bf56e628070021300784cb9cee0286f · Note
• https://t.me/cveNotify/146145 · Telegram Post
• https://twitter.com/CVEnew/status/2000611211931779142 · Twitter Post
• https://t.me/msrcreports/2592 · Telegram Post
• https://t.me/CVEtracker/39821 · Telegram Post