CVE-2024-52976

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-52976
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52976.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-52976
Published
2025-05-01T13:03:58.672Z
Modified
2026-07-08T07:15:28.768029312Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Elastic Agent Inclusion of Functionality from Untrusted Control Sphere
Details

Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection.

An attacker requires local access and the ability to modify osqueryd configurations.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "last_affected": "7.17.24"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.15.3"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52976.json",
    "cna_assigner": "elastic",
    "cwe_ids": [
        "CWE-829"
    ]
}
References

Affected packages

Git / github.com/elastic/elastic-agent

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elastic-agent
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0ab98c58e4e518a22e47047e4fb2c96322b3f107
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:elastic:elastic_agent:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.15.4"
        }
    ]
}

Affected versions

v8.*
v8.15.0
v8.15.1
v8.15.2
v8.15.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-52976.json"