Findings

CVE-2026-4819

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

Published Mar 31, 2026 · updated Jul 24, 2026 · search-guard flx

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 31, 2026 · NIST NVD

    Detected

    In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

  2. Jul 24, 2026 · NIST NVD

    Updated

    In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

Affected

  • cpe search-guard/flxversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-4819

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4819

    In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

    nvd.nist.gov

References