Skip to content
OpenAdvisories
High WID-SEC-2026-2824 25 CVEs

Kibana: Mehrere Schwachstellen

Published Aug 12, 2026 · Updated Aug 13, 2026 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.

Product

Kibana ist ein Open Source Datenvisualisierungs-Plugin für Elasticsearch.

Vulnerabilities 25

  • High 8.1
    CVE-2026-72665

    Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions

    Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A Kibana user who is able to author and evalua…

    Elastic Kibana
  • High 7.7
    CVE-2026-72670

    Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials

    A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authent…

    Elastic Kibana
  • High 7.7
    CVE-2026-72672

    Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data

    The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user. Only Kibana featur…

    Elastic Kibana
  • High 7.6
    CVE-2026-72669

    Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering

    The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the routes that read and update that state do not verify ownership. An authenticated user who holds only generic read access to the space can …

    Elastic Kibana
  • High 7.3
    CVE-2026-72658

    Cross-Site Request Forgery in Kibana Leading to Privilege Escalation

    Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user…

    Elastic Kibana
  • High 7.1
    CVE-2026-72629

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). The result is disclosure of inference output from a trained model in a dif…

    Elastic Kibana
  • High 7.1
    CVE-2026-72630

    Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation

    Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122). Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, th…

    Elastic Kibana
  • High 7.1
    CVE-2026-72632

    Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys

    Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116). Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability …

    Elastic Kibana
  • High 7.1
    CVE-2026-72643

    Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents

    Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication rea…

    Elastic Kibana
  • High 7.1
    CVE-2026-72675

    Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification

    Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse (CAPEC-122). Kibana Machine Learning carries out its Elasticsearch operations with elevated internal permissions an…

    Elastic Kibana
  • Medium 6.8
    CVE-2026-72666

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72631

    Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys

    Improper Privilege Management (CWE-269) in Kibana Fleet can lead to privilege escalation via Privilege Escalation (CAPEC-233). An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearc…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72651

    Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with read-only privileges to the alerting feature could submit a specially crafted, malformed pa…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72659

    Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding on…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72660

    Uncaught Exception in Kibana Leading to Denial of Service

    Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged access can cause an internal error condition in…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72663

    Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service

    Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted, deeply nested expression submitted to a Kibana TSVB visualization is evaluated with a worst-case cost that grows…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72664

    Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions

    Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A Kibana user who holds only detection rule authoring priv…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72667

    Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72674

    Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

    Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). A user-supplied list of document fields accepted by the Kibana Playground for RAG feature was neither bounded in len…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72680

    Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification

    Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belon…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-72681

    Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure

    Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature's functionality. This allows privilege escalation and could lead to …

    Elastic Kibana
  • Medium 5.4
    CVE-2026-72673

    Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations

    Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Synthetics private locations can be shared with more than one space, and dele…

    Elastic Kibana
  • Medium 4.3
    CVE-2026-72650

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user who is authorized to read alerting rules in a single Kibana s…

    Elastic Kibana
  • Medium 4.3
    CVE-2026-72655

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification

    Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted ca…

    Elastic Kibana
  • Medium 4.3
    CVE-2026-72671

    Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments

    A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained models as a target, but it verifies only the privileges that apply to anomaly detection jobs and data frame analytics jobs. A user whose r…

    Elastic Kibana

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-58276, EUVD-2026-58275, EUVD-2026-58273, EUVD-2026-58271, EUVD-2026-58270, EUVD-2026-58269, EUVD-2026-58268, EUVD-2026-58266, EUVD-2026-58265, EUVD-2026-58262, EUVD-2026-58261, EUVD-2026-58260, EUVD-2026-58259, EUVD-2026-58258, EUVD-2026-58256, EUVD-2026-58255, EUVD-2026-58254, EUVD-2026-58278, EUVD-2026-58288, EUVD-2026-58289, EUVD-2026-58290, EUVD-2026-58220, EUVD-2026-58221, EUVD-2026-58267, EUVD-2026-58257

  2. #1

    Initiale Fassung

References