Description
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | before 6.4.3 and 5.6.13 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 3 | atomic-enterprise-service-catalog +1 | 1:3.11.51-1.git.1671.2d16650.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift +12 | 3.11.51-1.git.0.1560686.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-cluster-autoscaler | 3.11.51-1.git.0.0aa9fc2.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-descheduler | 3.11.51-1.git.300.89070e8.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-dockerregistry | 3.11.51-1.git.446.d29ce0e.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-metrics-server | 3.11.51-1.git.52.03e3a91.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-node-problem-detector | 3.11.51-1.git.254.22189b0.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-service-idler | 3.11.51-1.git.14.813574a.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | atomic-openshift-web-console | 3.11.51-1.git.324.0ae64ed.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | cri-o | 1.11.10-1.rhaos3.11.git42c86f0.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | golang-github-openshift-oauth-proxy | 3.11.51-1.git.419.1af74df.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | jenkins | 2.138.2.1542054911-1.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | jenkins-2-plugins | 3.11.1542061886-1.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | kibana | 5.6.13-1.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | openshift-ansible +4 | 3.11.51-2.git.0.51c90a3.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | openshift-enterprise-autoheal | 3.11.51-1.git.219.8ea4275.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | openshift-enterprise-cluster-capacity | 3.11.51-1.git.380.ffa21af.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | openshift-monitor-project-lifecycle | 3.11.51-1.git.59.7b59e29.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | openshift-monitor-sample-app | 3.11.51-1.git.5.f6d0188.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | prometheus +1 | 3.11.51-1.git.5023.0ad933c.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | prometheus-alertmanager +1 | 3.11.51-1.git.0.50a0687.el7 | RHBA-2018:3743 |
| Red Hat OpenShift 3 | prometheus-node-exporter +1 | 3.11.51-1.git.1063.12dd8be.el7 | RHBA-2018:3743 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
mpgn/CVE-2018-17246 ★ 65 · Mar 8, 2019
CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13
-
ght657/work1-secure-api ★ 0 · Oct 28, 2026
HDU IS Work 1 - Secure REST API (Flask) with CI/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis
-
Almandev/Sub-folderFetcher ★ 0 · May 9, 2025
A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Kibana - Local File Inclusion http/cves/2018/CVE-2018-17246.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- RHBA-2018:3743 Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026