CVE-2026-72633

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Incorrect authorization in Kibana Entity Analytics allows an authenticated user with only read-level Security feature access and no Elasticsearch privileges to stop the recurring Privilege Monitoring engine task for a Kibana space. This results in a loss of security monitoring as privileged user monitoring stops producing data for that space, even though the engine continues to report a healthy state to operators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.