Privilege Escalation Vulnerability in Kibana Fleet by Elastic

CVE-2026-72630

What is CVE-2026-72630?

A vulnerability in Kibana Fleet allows for privilege escalation due to incorrect authorization mechanisms. This flaw enables authenticated users with limited endpoint policy management privileges to alter integration policies inappropriately. When an existing policy is modified, the access restrictions should evaluate the replacement details, but instead, they assess the stored policy. This oversight means that users can potentially reconfigure and manage integration policies for different integrations without proper authority.

References