# Elastic Search Unrestricted Information Disclosure Vulnerability "version 7.16.2"

**URL:** <https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920>\
**Category:** Elastic Agent\
**Created:** [May 7, 2025, 5:58pm UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920 "2025-05-07T17:58:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![AhmedHassan](https://avatars.discourse-cdn.com/v4/letter/a/bc8723/32.png) [@AhmedHassan](https://discuss.elastic.co/u/AhmedHassan)\
**Post date:** [May 7, 2025, 5:58pm UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920/1 "2025-05-07T17:58:33Z")

</div>

We are using Elasticsearch version 7.16.2 and is coming out with the finding "Elasticsearch Unrestricted Information Disclosure Vulnerability".  
For reference Report URL :[Elasticsearch Unrestricted Access Information Disclosure\<!-- --\> | Tenable®](https://www.tenable.com/plugins/nessus/101025)

Please let me know how we can resolve the vulnerability.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 8, 2025, 4:24am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920/2 "2025-05-08T04:24:32Z")

</div>

Welcome!

Thank you for your report.

Elastic's security reporting guidelines are available at [Security issues | Elastic](https://www.elastic.co/community/security).

Per those guidelines, all reports of potential security issues or vulnerabilities should be sent via email to [security@elastic.co](mailto:security@elastic.co).

We are unable to discuss potential issues of this nature here. Please send your report to the email address above, where it can be appropriately handled.

Anyway, I'd upgrade to the latest 8.18 version 😉