CVE-2020-7009

score

<0.1

cvss

8.8

epss

1.9%

published

2020-03-31

kev added

—

first seen

2026-10-21

Elasticsearch versions from 6.7.0 < 6.8.8 and 7.0.0 < 7.6.2 contain a privilege escalation caused by insecure API key creation, letting attackers generate API keys with elevated privileges, exploit requires attacker to create API keys.