Search Guard FLX — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Search Guard FLX, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-4819	Search Guard audit logs can contain under certain conditions user credentials CWE-532	4.9	Medium	2026-03-31
CVE-2026-4818	Some management operations on data streams are not properly restricted when user does not have the necessary privileges CWE-285	6.8	Medium	2026-03-31
CVE-2026-4799	Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests CWE-601	4.3	Medium	2026-03-31
CVE-2025-13653	Unauthorized access to documents in data streams with specially crafted requests CWE-200	4.3	Medium	2025-12-01
CVE-2025-12149	Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents CWE-200	6.2	-	2025-11-14
CVE-2025-12148	Unauthorized access to fields protected by Field Masking (FM) for fields of type IP CWE-200	9.1^AI	Critical^AI	2025-10-29
CVE-2025-12147	Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object CWE-200	9.1^AI	Critical^AI	2025-10-29

All 7 known CVE vulnerabilities affecting Search Guard FLX with full Chinese analysis, references, and POCs where available.