CVE-2026-4799CWE-601

Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

Medium · published March 31, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
20.7
In the wild
Unconfirmed
What it is

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.7th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-03-31T14:41Z
EPSS history
Timeline
  • 31 MAR 14:41Z
    Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
    cvelistv5