Elastic Agent
1 CVEs
product
Monthly
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.
RCE
Elastic
Elastic Agent
NVD
CVSS 3.1
4.4
EPSS
0.1%
CVE-2024-52976
EPSS 0%
CVSS 4.4
MEDIUM
PATCH
This Month
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.
RCE
Elastic
Elastic Agent
NVD