CVE-2026-78582

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authorization flaw allows an authenticated user with Synthetics privileges limited to a single Kibana space to permanently delete Synthetics monitors shared into spaces they are not authorized to access. If a monitor is linked to a private location, this action also removes the underlying Elastic Agent integration configuration, bypassing the authorization checks typically enforced by Fleet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.