← Vulnerability feed

Vulnerability record · CVE-2023-46667 · published 26 October 2023

CVE-2023-46667: Elastic fleet server sensitive information in log file vulnerability

Elastic · Fleet Server

An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in the policy including for Elasticsearch and third-party services. Alternatively a threat actor could potentially enrol agents to the clusters and send arbitrary events to Elasticsearch.

8.1 CVSS 3.1 High EPSS 0.55% · top 56.2% CWE-532 · Sensitive information in log file
8.1CVSS 3.1 base score
0.55%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in the policy including for Elasticsearch and third-party services. Alternatively a threat actor could potentially enrol agents to the clusters and send arbitrary events to Elasticsearch.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://discuss.elastic.co/t/fleet-server-v8-10-3-security-update/344737 Release Notes
https://www.elastic.co/community/security Vendor Advisory
https://discuss.elastic.co/t/fleet-server-v8-10-3-security-update/344737 Release Notes
https://www.elastic.co/community/security Vendor Advisory

Track CVE-2023-46667 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2026-56150Elastic fleet server allocation without limits vulnerabilityAllocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). …EPSS 0.48%6.5CVE-2026-72657Elastic fleet server insecure direct object reference vulnerabilityAuthorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via Manipulating User-Controlled Variab…EPSS 0.39%3.1CVE-2026-78587Elastic fleet server incorrect authorization vulnerabilityIncorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse (CAPEC-122). Fleet S…EPSS 0.30%4.6CVE-2025-24984Windows NTFS logs sensitive information, enabling physical-attack disclosureWindows NTFS writes sensitive information into a log file, which an attacker can read to disclose data. The flaw is rated CVSS 3.1 4.6 (Medium) and a…KEVEPSS 2.0%analysed4.4CVE-2023-21492Samsung Android kernel pointer logging enables ASLR bypassSamsung Android devices log kernel pointers to a log file before the SMR May-2023 Release 1 fix. A privileged local attacker who can read those logs …KEVEPSS 2.6%analysed

Source: NIST National Vulnerability Database (record CVE-2023-46667), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.