Resource Allocation Vulnerability in Kibana by Elastic

CVE-2026-72651

What is CVE-2026-72651?

A vulnerability exists in Kibana that allows authenticated users with read-only privileges to exploit the alerting feature. By submitting specially crafted and malformed payloads, these users can trigger excessive resource allocation, leading to a denial of service. This condition results in the Kibana process consuming resources to the point where it cannot serve further requests, necessitating a restart of the process to restore functionality. Addressing this vulnerability is critical for maintaining service availability and performance.

References