{"id":"CVE-2026-33458","state":"PUBLISHED","title":"Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure","description":"Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.","publishedAt":"2026-04-08T16:47:58.462Z","updatedAt":"2026-04-08T19:22:33.432Z","severity":{"score":6.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","source":"elastic"},"assigner":"elastic","products":["Elastic Kibana"],"affected":[{"vendor":"Elastic","product":"Kibana","defaultStatus":"unaffected","versions":[{"version":"9.3.0","status":"affected","lessThanOrEqual":"9.3.2","versionType":"semver"}]}],"references":["https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815"],"weaknesses":["CWE-918"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/33xxx/CVE-2026-33458.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-33458","state":"PUBLISHED","datePublished":"2026-04-08T16:47:58.462Z","dateUpdated":"2026-04-08T19:22:33.432Z","assignerShortName":"elastic","assignerOrgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","dateReserved":"2026-03-20T10:53:23.099Z"},"containers":{"cna":{"title":"Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure","descriptions":[{"lang":"en","value":"Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data."}],"affected":[{"vendor":"Elastic","product":"Kibana","defaultStatus":"unaffected","versions":[{"version":"9.3.0","status":"affected","lessThanOrEqual":"9.3.2","versionType":"semver"}]}],"references":[{"url":"https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":6.8,"confidentialityImpact":"HIGH","integrityImpact":"NONE","scope":"CHANGED","userInteraction":"NONE","privilegesRequired":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","description":"CWE-918 Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"elastic","orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","dateUpdated":"2026-04-08T16:47:58.462Z"},"impacts":[{"capecId":"CAPEC-664","descriptions":[{"lang":"en","value":"CAPEC-664 Server Side Request Forgery"}]}],"source":{"discovery":"Elastic"},"x_generator":{"engine":"Elastic CVE Publisher 0.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-08T19:13:38.274501Z","id":"CVE-2026-33458","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-08T19:22:33.432Z"}}]}}}