CVE-2026-56147

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An inconsistency in the file access authorization logic allows a low-privileged authenticated user to retrieve, modify, and delete case attachments from feature areas they are not authorized to access. This occurs because the access control check and the resource retrieval process utilize different resolution mechanisms, enabling an attacker with limited file management permissions to compromise the integrity of case attachments or disclose unauthorized information, specifically those associated with Security Solution cases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.