CVE-2026-78591

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description A path traversal issue exists in the Kibana Fleet feature, where the software fails to properly limit pathnames to restricted directories. This allows a low-privileged user to manipulate the Fleet administration interface so that subsequent actions performed by a higher-privileged user target unintended resources. This can result in the unauthorized deletion of resources, including accounts with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.