What’s Vulnerable › Products

Elastic Cloud on Kubernetes vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Elastic Cloud on Kubernetes version is affected

Latest Elastic Cloud on Kubernetes vulnerabilities

• CVE-2026-78609 — Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data (CVSS 5.4)
• CVE-2026-78600 — Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention (CVSS 3.5)
• CVE-2026-72648 — Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure (CVSS 6.5)
• CVE-2026-72640 — Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure (CVSS 6.5)
• CVE-2023-31416 — Elastic Cloud on Kubernetes (ECK) secret token configuration issue (CVSS 5.3)
• CVE-2020-7010 — (CVSS 7.5)