CVE-2026-63143

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Missing authorization allows a user with limited feature privileges to access workflow execution outputs within their Kibana space. This occurs because the documented API does not properly enforce the required authorization, potentially leading to the disclosure of sensitive information returned by workflow steps, including results from connected data sources that the user is not authorized to access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.