CVE-2026-106475

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the...

EUVD-2026-124574

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the...

CVE-2026-106475

The Elasticsearch data source resource proxy is vulnerable to improper authorization and path validation issues. The proxy forwards request methods and paths to Elasticsearch using the data source's credentials without restricting them to necessary operations. Consequently, a user capable of quer...

CVE-2026-106475 Elasticsearch data source resource proxy allows arbitrary methods and paths with the data source's credentials

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the...