CVE-2026-115708
Description
A flaw was found in Elastic Cloud Enterprise (ECE). This vulnerability allows a local attacker to bypass authentication controls and make unauthorized configuration changes to other deployments on the same host. By conducting a symbolic link (symlink) attack, where a file shortcut is used to redirect file access, an attacker can compromise isolated environments running on shared infrastructure.
Statement
This vulnerability is rated as Important because an attacker can break tenant isolation boundaries on a shared host to modify other deployments, justifying a higher severity due to cross-environment impact despite requiring elevated local privileges. Elastic Cloud Enterprise is proprietary third-party software that is not packaged, shipped, or supported in Red Hat Enterprise Linux or any other Red Hat product offerings. As a result, default Red Hat deployments are not affected unless customers independently run this third-party platform within their infrastructure.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Access Control
Technical Impact: Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
Other
Technical Impact: Execute Unauthorized Code or Commands
Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
