diff --git a/elasticsearch/src/main/plugin-metadata/plugin-security.policy b/elasticsearch/src/main/plugin-metadata/plugin-security.policy
index 5e0da18f30f..72c97116cf2 100644
--- a/elasticsearch/src/main/plugin-metadata/plugin-security.policy
+++ b/elasticsearch/src/main/plugin-metadata/plugin-security.policy
@@ -27,4 +27,7 @@ grant {
 
   // needed for multiple server implementations used in tests
   permission java.net.SocketPermission "*", "accept,connect";
+
+  // needed for Windows named pipes in machine learning
+  permission java.io.FilePermission "\\\\.\\pipe\\*", "read,write";
 };