agent-skills

Elastic Agent Skills Elastic Agent Skills — 由构建 Elastic 的团队打造 — 将原生平台专业知识直接交付给你的 AI 编码代理。这是官方 Agent Skills 库，兼容 Cursor、GitHub Copilot、Windsurf、Gemini CLI 等代理型 IDE。这些技能遵循 Agent Skills 开放标准。 !NOTE 技术预览 这些技能处于早期发布阶段，正在积极开发中。随着技能通过稳健的评估逐步完善以及模型生态的演进，预计会有变更。请经常回来查看更新。 关于...

CVE-2026-78604

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

CVE-2026-78604

CVE-2026-78604 is an incorrect permission assignment (CWE-732) in Elastic Agent on Windows systems installed in unprivileged mode . Resources used by the agent service are created with access controls broader than required, allowing a local user to replace binaries (CAPEC-642) and cause the servi...

EUVD-2026-70057

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

osquery_cve-2024-23443

Prueba de Concepto POC CVE-2024-23443 hpbiososquery Agregar la extensión osqery HP BIOS WMI a Elastic Agent Dependencias pip install pywin32 pip install osquery pip install pyinstaller Compilación root@kitploit: pyinstaller --onefile hpbiosenumeration.py Instalación 1. Copie la extensión a la...

Elastic Agent 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-150)

Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where...

GO-2026-5544 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, elastic-agent...

GO-2026-5932 vulnerabilities

Vulnerabilities for packages: terrafmt-fips, elastic-agent-fips, elastic-agent, terrafmt...

GO-2026-5343 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, elastic-agent...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: grafana-fips, beats-fips, elastic-agent, consul, zot, cloudbeat-fips, frankenphp-8.4, commercial-expanso-edge, kine, commercial-grafana, cloudbeat, consul-fips, vault, datadog-agent-fips, rke2-runtime, loki, containerd, elastic-agent-fips, k3s, frankenphp-8.5, beats,...

GO-2025-4252 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server, apm-server-fips, beats-fips, elastic-agent, cloudbeat...

GO-2023-2413 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server, apm-server-fips, elastic-agent-fips, elastic-agent, cloudbeat...

GO-2025-4253 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server, apm-server-fips, elastic-agent-fips, elastic-agent, cloudbeat...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: bento, minio, zabbix-agent2, influxd, agentbeat-fips, agentbeat, falcosidekick, telegraf, dapr, dapr-fips, beats-fips, elastic-agent, elastic-agent-fips, zabbix-agent2-fips, beats, minio-fips, falcosidekick-fips...

EUVD-2026-58220

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...