CVE-2026-63139

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authenticated low-privileged user can cause a denial of service by exploiting uncontrolled resource consumption within the Canvas functionality. By sending a specially crafted request, the attacker can trigger excessive allocation, which leads to the termination of the Kibana server process, affecting all users of the instance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.