Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-78583

Incorrect Authorization in Kibana Leading to Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
elastic

Description

Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding Fleet management privileges could therefore cause every Elastic Agent on a targeted policy to receive a credential carrying arbitrarily elevated Elasticsearch cluster privileges, up to and including full cluster administration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Kibana

Default version status: unaffected

  • 8.0.0 to ≤ 8.19.20affected
  • 9.0.0 to ≤ 9.4.5affected
  • 9.5.0 to ≤ 9.5.2affected

References