CVE-2026-72681

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Kibana Agent Builder fails to properly verify if the requesting user possesses the necessary privileges for a separate Kibana feature before creating and executing a tool that triggers that feature's functionality. This flaw enables privilege escalation, potentially resulting in the unauthorized disclosure of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.