Authorization Bypass Vulnerability in Kibana by Elastic

CVE-2026-115292

What is CVE-2026-115292?

This vulnerability allows an authenticated user with access to certain Machine Learning features in Kibana to bypass access controls. Users can access audit and error messages for data frame analytics jobs in other Kibana spaces without proper permissions. This may include sensitive job details and could lead to unauthorized information disclosure, highlighting a severe risk in multi-tenant environments.

References