CVE-2026-78590

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description A path traversal flaw exists in the Kibana Fleet feature. A low-privileged user with write access to Fleet Settings can manipulate pathnames to target restricted directories. This allows the user to cause a subsequent administrative action to operate on unintended internal resources, leading to the unauthorized deletion of privileged assets, such as user accounts. Successful exploitation requires an administrator to interact with the affected Fleet interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.