CVE-2026-78581

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authorization bypass exists where an authenticated user can reference another user's AI Assistant conversation identifier to access or modify conversations they do not own. This occurs because functionality is not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects. Successful exploitation requires knowledge of a hard-to-guess identifier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.