CVE-2026-102407

score

0.4

cvss

5.4

epss

0.2%

published

2026-10-06

kev added

—

first seen

2026-10-21

Elasticsearch contains an incorrect authorization vulnerability caused by insufficient access control in the Modify Data Streams API, letting authenticated users with privileges on one resource modify unauthorized data streams, exploit requires authenticated user with privileges on a resource.