Resource Allocation Vulnerability in Kibana from Elastic

CVE-2025-68389

What is CVE-2025-68389?

A vulnerability in Kibana allows low-privileged authenticated users to exploit resource allocation without limits. By crafting specific HTTP requests, these users can trigger excessive resource allocation, resulting in a denial of service (DoS) that disrupts the Kibana process. This issue underscores the importance of implementing limits on resource usage to safeguard systems against potential attacks and ensure ongoing service availability.

References