CVE-2026-78595
published 2026-09-03CVE-2026-78595: Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.28%
20.0th percentile
Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | kibana | 9.1.0 – 9.4.5 | — |
| elastic | kibana | 9.5.0 – 9.5.2 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Elastic Kibana up to 9.4.5/9.5.2 Fleet authorization (WID-SEC-2026-3177)
vuldb·2026-09-05·CVSS 4.3
CVE-2026-78595 [MEDIUM] Elastic Kibana up to 9.4.5/9.5.2 Fleet authorization (WID-SEC-2026-3177)
A vulnerability was found in Elastic Kibana up to 9.4.5/9.5.2. It has been rated as problematic. The impacted element is an unknown function of the component Fleet. Performing a manipulation results in missing authorization.
This vulnerability is cataloged as CVE-2026-78595. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122).
ghsa_unreviewed·2026-09-03
CVE-2026-78595 [MEDIUM] CWE-862 Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122).
Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-03
Published