Incorrect Authorization in Kibana Entity Analytics by Elastic

CVE-2026-72633

What is CVE-2026-72633?

An authorization flaw in Kibana Entity Analytics allows an authenticated user, with only read-level access to security features and without Elasticsearch privileges, to disable the Privilege Monitoring engine task for a specific Kibana space. This manipulation halts the generation of monitoring data while misleading operators by displaying a healthy status, ultimately undermining the integrity of security monitoring within the environment.

References