CVE-2026-78607

score

0.2

cvss

5.4

epss

0.3%

published

2026-09-01

kev added

—

first seen

2026-10-21

Elasticsearch custom inference service contains a missing authorization vulnerability caused by insufficient access control, letting users with inference execution privileges cause information disclosure via outbound inference traffic redirection, exploit requires inference execution privileges.