Incorrect Authorization Issue in Kibana by Elastic

CVE-2026-102412

What is CVE-2026-102412?

A vulnerability in Kibana allows authenticated users with limited privileges to access sensitive information that should be restricted. Specifically, this issue arises due to incorrect authorization handling, enabling users to retrieve sensitive credential material meant for users with administrative access to Fleet settings. If exploited, attackers may gain access to private cryptographic keys used for Fleet Server host connections, potentially allowing them to impersonate trusted Fleet infrastructure components, thereby compromising system security.

References