Denial of Service Vulnerability in Kibana by Elastic

CVE-2026-72659

What is CVE-2026-72659?

A resource allocation vulnerability in Kibana allows malicious authenticated users with low-privileged access to submit specially crafted payloads. This leads to unvalidated processing of requests, resulting in unbounded memory growth. As the Kibana process consumes excessive memory, it eventually triggers a denial of service, rendering the service unavailable until it is manually restarted. Proper safeguards and validation mechanisms must be implemented to mitigate this risk and ensure sustained service availability.

References