Credential disclosure via attacker-controlled inference destinations

Missing authorization in Elastic Elasticsearch allows remote authenticated users to expose administrator-provisioned credentials. The custom inference service accepts an execution-privileged user's chosen destination for outbound inference traffic and attaches secret-backed configuration without an adequate authorization check. Exploitation requires inference execution privileges and a custom inference service with secret-backed configuration; disclosed access is limited to credentials sent with the redirected traffic.