Uncontrolled Resource Consumption Vulnerability in Kibana by Elastic

CVE-2026-42400

What is CVE-2026-42400?

An uncontrolled resource consumption vulnerability has been identified in Kibana by Elastic, which could lead to denial of service. This arises from an authenticated user being able to send a specially crafted compressed request payload that bypasses initial authorization checks, thereby causing excessive memory and CPU usage. The result may render a Kibana instance unresponsive or ultimately lead to a crash, severely impacting system availability and performance.

References