High

Analysis Summary

CVE-2025-25011 CVSS:7

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

CVE-2025-0712 CVSS:7

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

Impact

• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-25011

• CVE-2025-0712

Affected Vendors

Remediation

Refer to Elastic Security Advisory for patch, upgrade, or suggested workaround information.

Elastic Security Advisory