StackRadar

CVE-2025-37731

High

Advisory

Published 15 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
3 of 3
affected packages

Elasticsearch Improper Authentication

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
elasticsearchbitnami8.12.1-0, 8.12.2-0, 9.0.1-0, 9.1.2-08.19.84
Elasticsearchbitnami8.12.1-0, 8.12.2-08.19.82
elasticsearchmaven7.0.0, 7.4.2, 7.6.0, 7.8.1+28 more8.19.8, 9.1.841
OSV records
BIT-elasticsearch-2025-37731GHSA-m9gh-789g-q5pv

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
elasticsearch@8.6.1
8.19.8

Open the chart page →

6,556
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
elasticsearch@7.12.1
8.19.8

Open the chart page →

4,099
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
elasticsearch@9.1.2
8.19.8
9.1.8

Open the chart page →

16,210
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
elasticsearch@8.12.1-0
Elasticsearch@8.12.1-0
elasticsearch@8.12.1
8.19.8
8.19.8
8.19.8

Open the chart page →

27,267
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
elasticsearch@7.14.1
8.19.8
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
elasticsearch@7.14.1
8.19.8

Open the chart page →

8,698
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
elasticsearch@7.0.0
8.19.8

Open the chart page →

18,042
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
elasticsearch@8.15.0
8.19.8

Open the chart page →

13,521
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
elasticsearch@7.10.2
8.19.8

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
elasticsearch@7.11.1
8.19.8

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
elasticsearch@7.10.2
8.19.8

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
elasticsearch@7.17.1
8.19.8

Open the chart page →

38,346
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
elasticsearch@7.10.1
8.19.8

Open the chart page →

6,110
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
8.19.8

Open the chart page →

17,284
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
elasticsearch@8.12.2-0
Elasticsearch@8.12.2-0
elasticsearch@8.12.2
8.19.8
8.19.8
8.19.8

Open the chart page →

37,373
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
elasticsearch@7.17.0
8.19.8
treskon/portrait:DEV-latest88e813f22347
elasticsearch@7.17.25
8.19.8

Open the chart page →

31,844
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
elasticsearch@7.17.8
8.19.8

Open the chart page →

6,045
airbyte-api-serverairbyteVerified publisher0.293.41 of 1See more

airbyte-api-server airbyte 0.293.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
airbyte/airbyte-api-server:0.63.8e1c5e7cfec8a
elasticsearch@7.17.21
8.19.8

Open the chart page →

854
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
elasticsearch@7.16.3
8.19.8

Open the chart page →

1,413
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
elasticsearch@9.0.1-0
elasticsearch@9.0.1
8.19.8
9.1.8

Open the chart page →

40,238
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@7.10.2
8.19.8

Open the chart page →

5,806
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
elasticsearch@7.6.0
8.19.8

Open the chart page →

8,245
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
elasticsearch@7.17.2
8.19.8

Open the chart page →

10,564
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
elasticsearch@7.15.1
8.19.8
jingking/geonetwork-hnap:4.2.843e74ab234e1
elasticsearch@7.17.15
8.19.8
library/elasticsearch:7.17.1588c2ec10c7f2
elasticsearch@7.17.15
8.19.8

Open the chart page →

34,754
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
elasticsearch@9.1.2
8.19.8
9.1.8

Open the chart page →

15,089
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
elasticsearch@7.8.1
8.19.8

Open the chart page →

4,664
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
elasticsearch@7.16.2
8.19.8

Open the chart page →

2,273
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
elasticsearch@7.4.2
8.19.8

Open the chart page →

7,929
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
elasticsearch@8.17.3
8.19.8

Open the chart page →

4,257
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
8.19.8

Open the chart page →

9,300
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
elasticsearch@7.15.2
8.19.8

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
elasticsearch@7.15.2
8.19.8

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
elasticsearch@7.15.2
8.19.8

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
elasticsearch@7.15.2
8.19.8

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
elasticsearch@7.15.2
8.19.8

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
elasticsearch@7.15.2
8.19.8

Open the chart page →

13,100
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
elasticsearch@7.17.22
8.19.8

Open the chart page →

21,211
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
elasticsearch@8.14.1
8.19.8

Open the chart page →

4,203
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
reportportal/service-jobs:5.7.2dc166c58485a
elasticsearch@7.9.3
8.19.8

Open the chart page →

25,737
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elasticsearch@7.17.11
8.19.8

Open the chart page →

4,674
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2025-37731.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@7.10.2
8.19.8

Open the chart page →

5,806

Container images carrying it

41 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@7.10.2
8.19.8
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
elasticsearch@9.1.2
8.19.8
9.1.8
2
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
8.19.8
2
airbyte/airbyte-api-server:0.63.8e1c5e7cfec8a
elasticsearch@7.17.21
8.19.8
1
airbyte/cron:0.40.17caf4f551c546
elasticsearch@7.16.3
8.19.8
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
elasticsearch@7.4.2
8.19.8
1
apache/ranger:2.7.076c176e8a0e4
elasticsearch@7.10.2
8.19.8
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
elasticsearch@7.0.0
8.19.8
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
elasticsearch@7.10.2
8.19.8
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
elasticsearch@7.11.1
8.19.8
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
elasticsearch@8.12.2-0
Elasticsearch@8.12.2-0
elasticsearch@8.12.2
8.19.8
8.19.8
8.19.8
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
elasticsearch@8.12.1-0
Elasticsearch@8.12.1-0
elasticsearch@8.12.1
8.19.8
8.19.8
8.19.8
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
elasticsearch@9.0.1-0
elasticsearch@9.0.1
8.19.8
9.1.8
1
conductoross/conductor:3.31.09fba127693e6
elasticsearch@7.17.11
8.19.8
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
elasticsearch@7.6.0
8.19.8
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
elasticsearch@7.17.2
8.19.8
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
elasticsearch@7.15.1
8.19.8
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
elasticsearch@7.15.2
8.19.8
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
elasticsearch@7.15.2
8.19.8
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
elasticsearch@7.15.2
8.19.8
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
elasticsearch@7.15.2
8.19.8
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
elasticsearch@7.15.2
8.19.8
1
gurolakman/ussigw-core:1.0.48739565c3ea2
elasticsearch@7.15.2
8.19.8
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
elasticsearch@7.17.15
8.19.8
1
kubebb/gateway-api:v5.6.04d062f20309c
elasticsearch@7.8.1
8.19.8
1
library/elasticsearch:8.17.32cc40b15dff8
elasticsearch@8.17.3
8.19.8
1
library/elasticsearch:8.15.0310b9fc03b06
elasticsearch@8.15.0
8.19.8
1
library/elasticsearch:7.17.0332c6d416808
elasticsearch@7.17.0
8.19.8
1
library/elasticsearch:7.17.1588c2ec10c7f2
elasticsearch@7.17.15
8.19.8
1
library/elasticsearch:7.17.8fdc73b3249c1
elasticsearch@7.17.8
8.19.8
1
library/sonarqube:10.7.0-community0842dcd4c8f8
elasticsearch@8.14.1
8.19.8
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
elasticsearch@7.14.1
8.19.8
1
library/sonarqube:8.9.2-community88cd63154d4b
elasticsearch@7.12.1
8.19.8
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
elasticsearch@7.14.1
8.19.8
1
library/sonarqube:8.9-communityeb2f0be32efd
elasticsearch@7.16.2
8.19.8
1
library/sonarqube:10.0.0-communityef9723cf4fe4
elasticsearch@8.6.1
8.19.8
1
reportportal/service-jobs:5.7.2dc166c58485a
elasticsearch@7.9.3
8.19.8
1
treskon/portrait:DEV-latest88e813f22347
elasticsearch@7.17.25
8.19.8
1
trinodb/trino:45038c6f24ab1a4
elasticsearch@7.17.22
8.19.8
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
elasticsearch@7.10.1
8.19.8
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
elasticsearch@7.17.1
8.19.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.