Privilege Escalation Vulnerability in Kibana Agent Builder by Elastic

CVE-2026-72668

What is CVE-2026-72668?

The Kibana Agent Builder by Elastic contains a vulnerability that enables a non-administrative user to perform privileged operations by editing a shared agent. This could allow the user to execute actions under the identity of a higher-privileged user, thus enabling unauthorized modifications and full administrative access to the Kibana environment and the associated Elasticsearch cluster. When the same user can author workflows, the risk of escalating privileges is significantly heightened.

References