0 day in elastic agent 8.17.6

[boredchilada]

Hey all, is there any mitigation or advisory for the recent 0 day in the elastic agent / defend?

0-Day Research - Ashes Cybersecurity

https://ashes-cybersecurity.com/0-day-research/

Does 170 update the agents to a non vulnerable version?

[defensivedepth]

This is a quote from Joe Desimone, from the security channel in the Elastic Slack:

We received a report to our bug bounty program related to the article but the evidence supplied did not substantiate the claims. We are not tracking any outstanding security vulnerability with Elastic Defend related to this article. If any new information surfaces related to this research (or any submissions) we will work diligently to asses and provide guidance to our customers.

**Edit: Elastic's official response: https://discuss.elastic.co/t/elastic-response-to-blog-edr-0-day-vulnerability/381093

[boredchilada]

Thank you !

Good to close!