CVE-2026-103009

score

0.5

cvss

7.1

epss

0.2%

published

2026-10-06

kev added

—

first seen

2026-10-21

Elasticsearch contains an authorization bypass caused by inconsistent shard identifier validation in cross-cluster search requests using Remote Cluster Security 2.0, letting attackers with cross-cluster API keys access unauthorized index data, exploit requires crafted cross-cluster search requests with mismatched shard identifiers.