CVE-2026-72664

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Missing authorization allows a user with only detection rule authoring privileges for the Elastic Security solution to associate automated endpoint response actions with a detection rule. This occurs because functionality is not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects. Consequently, response actions such as host isolation, process operations, and execute operations can be carried out against matching hosts when a rule generates alerts, even if the user lacks the dedicated Endpoint response action privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.