Security Advisory
CVE-2025-12149
N/A
UNKNOWN
Vulnerability Description
In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.
Published Date
November 14, 2025
Official Source
NIST NVD Advisory