CVE-2025-37727

score

<0.1

cvss

5.7

epss

0.2%

published

2025-10-10

kev added

—

first seen

2026-10-21

Elasticsearch contains an information disclosure vulnerability caused by insertion of sensitive information in log files during auditing of reindex API requests, letting attackers access confidential data, exploit requires specific preconditions.