What is CVE-2024-52976?

CVE-2024-52976 is a medium-severity vulnerability in Elastic Agent, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 4.4/10. Published 2025-05-01.

How severe is CVE-2024-52976?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Elastic Agent

CVE-2024-52976

Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. An attacker requires local access and the ability to modify osque…

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Elastic Agent — versions 7.0.0, 8.0.0
Elastic Elastic_agent

Weakness classification (CWE)

CWE-829 — Inclusion of Functionality from Untrusted Control Sphere

References

security@elastic.co (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2024-52976?: CVE-2024-52976 is a medium-severity vulnerability in Elastic Agent, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 4.4/10. Published 2025-05-01.
How severe is CVE-2024-52976?: Medium severity. CVSS v3 base score is 4.4 out of 10.