CVE-2026-4819

CVE-2026-4819 describes an information disclosure vulnerability in Search Guard FLX versions 1.0.0 through 4.0.1, where the audit logging feature may inadvertently log user credentials during Kibana login attempts. This flaw is rated Medium severity with a CVSSv3.1 score of 4.9, indicating a high confidentiality impact (C:H) due to the exposure of sensitive user data. Exploitation requires high privileges (PR:H) to access the compromised audit logs, though the attack vector is network-based (AV:N) with low complexity (AC:L). There is currently no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability.