[ CVE-2026-102413 · Published 6 Oct 2026 ]
Vulnerability in Elastic Agent and Elastic Defend
[ Description ]Official description
Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations (including Chinese, Japanese, and Korean locales) on Windows, an unhandled exception can occur during file-path handling. This causes the Elastic Endpoint process to crash and restart repeatedly, which can degrade or disable Elastic Defend's real-time malware prevention and behavioral detection capabilities on the affected host for as long as the condition persists.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1276
Multiple vulnerabilities in Elastic products Translated from French
Multiple vulnerabilities have been discovered in Elastic products. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and a security policy bypass.