Threats affecting pkg:maven/com.floragunn/search-guard-flx

CVE-2025-13653 is a medium-severity vulnerability in floragunn's Search Guard FLX (version 3.1.0 up to 4.0.0 with enterprise modules disabled) that allows authenticated users to read sensitive documents from data streams without proper privileges. The flaw arises from improper access control, enabling unauthorized data exposure. Exploitation requires authentication but no user interaction and can be performed remotely over the network. Although no known exploits are currently in the wild, the vulnerability poses a confidentiality risk. European organizations using affected versions of Search Guard FLX should prioritize patching or mitigating this issue to prevent unauthorized data disclosure. Countries with significant Elasticsearch and Search Guard deployments, such as Germany and the UK, are more likely to be impacted.

EPSS 0.2%VulnerabilityCWE-200Germany+1

In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.