CVE-2026-42399

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authenticated low-privileged user can cause a denial of service by submitting a specially crafted Timelion visualization expression containing deeply chained function calls. This leads to uncontrolled resource consumption through excessive allocation, where the resulting data structure grows without bound, exhausting available memory and causing the service to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.