CVE-2026-78583

Name of the Vulnerable Software and Affected Versions Kibana versions 8.0.0 through 8.19.20 Kibana versions 9.0.0 through 9.4.5 Kibana versions 9.5.0 through 9.5.2

Description Incorrect authorization in Kibana allows for privilege escalation through input data manipulation. The system fails to validate Elasticsearch cluster privilege declarations originating from integration packages before using them to mint credentials for enrolled Elastic Agents. Consequently, a user with Fleet management privileges can cause every Elastic Agent on a targeted policy to receive credentials with arbitrarily elevated Elasticsearch cluster privileges, potentially granting full cluster administration.

Recommendations Upgrade Kibana versions 8.0.0 through 8.19.20 to 8.19.21 or later. Upgrade Kibana versions 9.0.0 through 9.4.5 to 9.4.6 or later. Upgrade Kibana versions 9.5.0 through 9.5.2 to 9.5.3 or later.