French agency warns of multiple security flaws in Elastic Cloud Enterprise
France's national cyber agency, CERT-FR, warned on 29 October 2026 about several security flaws in Elastic Cloud Enterprise, a software platform for running and managing Elasticsearch search and data services. Some flaws could let an attacker gain higher access rights, read data they should not see, or change data. Users are told to install the fixed versions 4.2.1 or 3.8.6, as described in Elastic's own security bulletins.
What does it mean?
Elastic Cloud Enterprise is software that companies use to run their own search and data systems. If you run an affected version, someone with bad intentions could possibly get access to data or permissions they should not have. The fix is to update to version 4.2.1 or 3.8.6 or later.
Who is affected?
Organizations running Elastic Cloud Enterprise versions 4.x before 4.2.1 or versions before 3.8.6.