CVE-2026-49089

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An issue exists where a query expression used in a connector reporting operation is processed without limits on its size. This allows an authenticated user with read-only privileges to send a single oversized request, causing the process to spend an unbounded amount of time evaluating the expression. This leads to a denial of service, rendering the system unable to serve any user until the process is restarted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.