CVEvulnerability

CVE-2026-78604

7.8 HIGH Published 2026-09-02 Modified 2026-09-04 Official page ↗
Status
Analyzed
Published
2026-09-02
Last modified
2026-09-04
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-732

Description

Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries (CAPEC-642). On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls broader than required. A local user could take advantage of this to cause the service to execute code of their choosing, ultimately obtaining SYSTEM-level privileges on the host.

Affected configurations

• elastic elastic agent (>= 8.0.0 < 8.19.21) • elastic elastic agent (>= 9.0.0 < 9.4.6) • elastic elastic agent (>= 9.5.0 < 9.5.2)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References