CVE-2026-49092

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An Unintended Proxy or Intermediary issue, also known as a Confused Deputy, occurs when a lower-privileged user can manipulate the system to process data from unauthorized sources using the privileges of another user. This leads to unauthorized information exposure because certain functionalities are not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.