Path Traversal Vulnerability in Kibana Fleet Feature

CVE-2026-115294

What is CVE-2026-115294?

An improper limitation of a pathname to a restricted directory in Kibana's Fleet feature allows a low-privileged user with write access to Fleet agent policies to exploit path traversal vulnerabilities. This exploitation could enable the user to trigger administrative actions on unintended resources. As a result, resources such as Kibana spaces and other organizational assets may be deleted even though the user lacks direct deletion permissions. Exploitation necessitates that an administrator interacts with the affected Fleet interface, introducing significant risks to organizational data integrity.

References