PT-2026-29281 · Floragunn · Search Guard Flx

Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-4819

Mitre

CVSS v3.1

4.9

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

Fix

Insufficiently Protected Credentials

Insertion into Log File

Weakness Enumeration

CWE-522

CWE-532

Related Identifiers

CVE-2026-4819

Affected Products

Search Guard Flx

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-4819 · Security Note
• https://search-guard.com/cve-advisory · Note
• https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0 · Note