CVE-2026-72630

Name of the Vulnerable Software and Affected Versions Kibana Fleet (affected versions not specified)

Description Incorrect Authorization in Kibana Fleet allows for privilege escalation through privilege abuse. The system restricts certain users to managing integration policies for a single specific integration. However, during the update of an existing integration policy, the restriction is checked against the integration stored in the policy instead of the replacement integration provided in the update. Consequently, an authenticated user with only the Elastic Defend endpoint policy management privilege can convert an endpoint policy they manage into a policy for a different integration and simultaneously provide that integration's configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.