CVE-2026-72661

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An internal data retrieval capability used by Elastic Defend endpoint response actions fails to enforce required Security Solution and endpoint privileges. This occurs because the system retrieves data using elevated internal permissions instead of the permissions associated with the requesting user. Consequently, an authenticated user with low privileges—specifically those lacking Security Solution privileges, endpoint privileges, and Elasticsearch privileges on the underlying data—can read endpoint response action records and the response content returned by managed hosts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.