Uncontrolled Resource Consumption in Kibana by Elastic

CVE-2026-33464

What is CVE-2026-33464?

A vulnerability in Kibana allows authenticated users with low-privileged roles to exploit uncontrolled resource consumption. By submitting a specially crafted oversized payload to an internal API, these users can cause the Kibana service to exhaust system resources, leading to a denial of service. This can render the Kibana instance unresponsive, affecting all users until the service is either restarted or recovers, creating significant disruptions in usage and accessibility.

References