CVE-2026-78598

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An incorrect authorization issue in the machine learning feature allows an authenticated user with machine learning job management privileges in one space to make a job's saved object accessible across all spaces in the instance. This occurs due to incorrectly configured access control security levels, potentially leading to information disclosure for users who do not have access rights to those additional spaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.