Denial of Service Vulnerability in Kibana by Elastic

CVE-2026-72660

What is CVE-2026-72660?

A vulnerability exists in Kibana, where improper input validation can lead to an uncaught exception. An attacker with low-privileged access could exploit this flaw by submitting specially crafted input data, triggering an internal error that causes the Kibana process to terminate. This results in a denial of service, rendering the Kibana application unavailable to all users until a service restart occurs. This issue can be repeatedly activated, creating a persistent disruption in service availability.

References