CVE-2026-72676

Name of the Vulnerable Software and Affected Versions Fleet Server (affected versions not specified)

Description Improper control of code generation in Fleet Server allows for the execution of attacker-supplied script content. This occurs because Kibana accepts an identifier for an output configuration without restricting it to safe characters. This identifier is subsequently integrated into a server-side script created by Fleet Server during routine agent policy processing, causing embedded script syntax to be executed as code instead of being treated as data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.