CVE-2026-72648

Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information disclosure via Retrieve Embedded Sensitive Data (CAPEC-37). When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account token, the token is written into the generated workload specification in cleartext rather than being referenced from the Kubernetes Secret that ECK maintains for the other credentials on the same path. Any principal able to read workload specifications in the affected namespace can therefore read a live Elasticsearch credential, even when Kubernetes RBAC does not grant that principal access to Secrets.

• CWE-526

• https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-3-5-0-security-update-esa-2026-113/389493Vendor Advisory

Published

Aug 13, 2026

Last Modified

Sep 4, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72641Incorrect Authorization (CWE-863) in Kibana can lead to unau…5.4
• CVE-2026-72642The native inference process that Elasticsearch uses to eval…8.8
• CVE-2026-72643Kibana Agent Builder determines whether a caller owns a priv…7.1
• CVE-2026-72644Uncaught Exception (CWE-248) in Kibana can lead to a denial …6.5
• CVE-2026-72645Memory Allocation with Excessive Size Value (CWE-789) in Ela…6.5
• CVE-2026-72647Uncontrolled Recursion (CWE-674) in Elasticsearch can lead t…6.5
• CVE-2026-72649Deserialization of Untrusted Data (CWE-502) in the Elasticse…8.8
• CVE-2026-7265A security vulnerability has been detected in SourceCodester…6.3
• CVE-2026-72650Authorization Bypass Through User-Controlled Key (CWE-639) i…4.3
• CVE-2026-72651Allocation of Resources Without Limits or Throttling (CWE-77…6.5
• CVE-2026-72652Allocation of Resources Without Limits or Throttling (CWE-77…6.5
• CVE-2026-72653Allocation of Resources Without Limits or Throttling (CWE-77…6.5