CVE-2026-4819

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security@search-guard.com

Published

2026-03-31

Last modified

2026-03-31

Weaknesses

CWE-522, CWE-532

Affected products

• Search Guard Flx (Floragunn)
• Flx (Search-guard)

References

• https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0
• https://search-guard.com/cve-advisory/