CVE-2026-102412

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An incorrect authorization issue exists where an authenticated user with limited Fleet management privileges can access sensitive credential material intended only for users with Fleet settings administrative access. This occurs because certain functionality is not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects. Successful exploitation allows an attacker to obtain private cryptographic key material used for Fleet Server host connections, potentially enabling the impersonation of trusted Fleet infrastructure components. Approximately 161,800 instances are identified globally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.