Description
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 8.12.0 – ≤ 8.19.6, 9.1.0 – ≤ 9.1.6, 9.2.0 | — |
Advisories 1
- WID-SEC-2025-2576 Kibana: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 13, 2025