CVE-2026-72663

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Inefficient Algorithmic Complexity in Kibana allows for a denial of service through input data manipulation. A specially crafted, deeply nested expression submitted to a Kibana TSVB visualization is evaluated with a worst-case cost that grows disproportionately with the input size. Since the evaluation runs synchronously, a single request can indefinitely consume the request-processing thread, causing the service to stop responding to all further requests until it is restarted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.