elastic cloud on kubernetes vulnerabilities and fixes

Recent CVEs affecting elastic cloud on kubernetes, with upgrade or downgrade steps. 4 tracked.

Also searched as: elasticcloudonkubernetes.

elastic cloud on kubernetes has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-09-02. Highest priority: CVE-2026-72648 (score 37/100).

• CVE-2026-72648 MEDIUM 6.5 UPGRADE Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes
• CVE-2026-78609 MEDIUM 5.4 UPGRADE Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification o
• CVE-2026-78600 LOW 3.5 UPGRADE Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privileg
• CVE-2026-72640 MEDIUM 6.5 UPGRADE The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets

FAQ

How do I fix elastic cloud on kubernetes vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is elastic cloud on kubernetes being exploited right now?

None of the tracked elastic cloud on kubernetes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which elastic cloud on kubernetes CVE should I patch first?

CVE-2026-72648 currently ranks highest (37/100): Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes.

RSS feed for elastic cloud on kubernetes · ← Back to latest CVEs