In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Search-guard Subscribe
Search Guard Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Search-guard Subscribe
Search Guard Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://docs.search-guard.com/latest/changelog-searchguard-flx-3_1_3 cve-icon cve-icon
https://docs.search-guard.com/latest/changelog-searchguard-flx-4_0_0 cve-icon cve-icon
https://search-guard.com/cve-advisory/ cve-icon cve-icon
History

Sat, 15 Nov 2025 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Search-guard
Search-guard search Guard
Vendors & Products Search-guard
Search-guard search Guard

Fri, 14 Nov 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 14 Nov 2025 16:30:00 +0000

Type Values Removed Values Added
Description In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is trigged from a Signal's watch, the DLS rule is not enforced, allowing access to all documents in the queried indices. In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.
Title Unauthorized access to documents protected by Document-Level Security (DLS), when Signal's watches include a search query involving protected documents Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents

Fri, 14 Nov 2025 14:00:00 +0000

Type Values Removed Values Added
Description In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is trigged from a Signal's watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.
Title Unauthorized access to documents protected by Document-Level Security (DLS), when Signal's watches include a search query involving protected documents
Weaknesses CWE-200
CWE-863
References
Metrics cvssV4_0

{'score': 6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: floragunn

Published:

Updated: 2025-11-14T16:51:01.897Z

Reserved: 2025-10-24T11:00:56.054Z

Link: CVE-2025-12149

cve-icon Vulnrichment

Updated: 2025-11-14T16:09:08.655Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-14T14:15:46.270

Modified: 2025-11-14T17:15:59.060

Link: CVE-2025-12149

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-11-15T22:07:48Z

Weaknesses