Skip to content
OpenAdvisories
Medium WID-SEC-2026-4336 4 CVEs

Kibana: Mehrere Schwachstellen

Published Nov 3, 2026 · Updated Nov 3, 2026 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen offenzulegen oder Daten zu manipulieren.

Product

Kibana ist ein Open Source Datenvisualisierungs-Plugin für Elasticsearch.

Vulnerabilities 4

  • High 7.3
    CVE-2026-115294

    Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion

    Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal (CAPEC-126). A low-privileged user with Fleet agent policies write access could cause a subsequent a…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-115293

    Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

    Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Ki…

    Elastic Kibana
  • Medium 4.3
    CVE-2026-115292

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with Machine Learning read access in one Kib…

    Elastic Kibana
  • Medium 4.3
    CVE-2026-115295

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with read access to connectors in one Kibana space can retrie…

    Elastic Kibana

Revision history

  1. #1

    Initiale Fassung

References