Elastic Agent And Elastic Defend vulnerabilities

2 vulnerabilities

Known vulnerabilities in Elastic Agent And Elastic Defend, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.2CVE-2026-102413chainguardelastic-agent-9.2+2
EPSS score
0.13%
Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations (including Chinese, Japanese, and Korean locales) on Windows, an unhandled exception can occur during file-path handling. This causes the Elastic Endpoint process to crash and restart repeatedly, which can degrade or disable Elastic Defend's real-time malware prevention and behavioral detection capabilities on the affected host for as long as the condition persists.7.1CVE-2023-46669elasticelastic_agent+2
EPSS score
0.20%
Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or has been exploited by malicious actors.