Threats tagged 'ghsa-5p88-6546-29fh'

CVE-2025-37736 is an improper authorization vulnerability in Elastic Cloud Enterprise that allows the built-in readonly user to perform privileged API calls that should be restricted. This flaw enables privilege escalation by granting access to sensitive service account and user management APIs.