CVE-2026-72667

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authenticated user with minimal privileges can cause a denial of service by submitting a specially crafted request to a validation capability of the Observability log analysis feature. This triggers an unbounded amount of concurrent work, leading to excessive allocation of resources. Consequently, the memory available to the process may be exhausted, rendering the system unavailable to all users until a restart occurs. Depending on the resource allocation of the deployment, this may result in either a full outage or degraded performance and elevated memory pressure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.