CVE-2026-72650

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authorization bypass occurs when an authenticated user, authorized to read alerting rules in one Kibana space, can retrieve alerting rule execution telemetry from spaces they are not permitted to access. This issue stems from functionality not properly constrained by Access Control Lists (ACLs), which are security mechanisms used to define which users or system processes are granted access to objects. The exposed telemetry includes rule identifiers, rule names, space identifiers, execution outcomes, timestamps, and execution counters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.