The flaw is an incorrect authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK). It lets an actor with limited permissions confined to a single Kubernetes namespace inject attacker‑controlled certificate material into the Elastic client trust bundle managed by ECK in a different namespace. Because the trust bundle is used to authenticate connections to Elasticsearch, manipulation of that bundle can enable the attacker to tamper with read or write operations, leading to unauthorized modification of data.

The vulnerability affects any deployment of Elastic Cloud on Kubernetes via the Elastic:Eck Operator. No specific product version is listed in the advisory, so the extent across releases is unknown; administrators should verify whether their ECK installation is impacted.

With a CVSS score of 5.4 and no EPSS or KEV data, the vulnerability is considered medium severity with limited publicly known exploitation. The attacker only needs basic namespace‑level Kubernetes permissions, indicating that a modest privilege set is sufficient. Based on the description, the likely attack vector involves a namespace‑restricted user exploiting missing cross‑namespace authorization checks to modify the trust bundle.