GHSA-pc7v-g5f6-75fv
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to gain access to other clusters data.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 4, 2025 6:33 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.